Tomi Pervala ICT Specialist

CMK (customer managed key) support has been made available for Power Platform environments, and it is currently possible to use CMK to encrypt an environment by applying an Enterprise Policy to it.

However, this only works if the environment does not have any pre-existing flows in it. This effectively restricts using CMK only for brand new environments, do be encrypted before any solutions are imported or built into it. Encrypting solutions that have been in place for years already would require creating new environments, encrypting them and migrating the solutions and data from the current environments. This would be a resource-intensive undertaking, not to mention the risks of data loss and downtime for the services in question.

The CMK encryption process needs improvement to support also pre-existing flows in an environment, making it possible to encrypt environments that already have solutions in place.