🔒 Provider-managed encryption (default)
IBM Cloud automatically manages the encryption keys.
Clients have no control over key rotation or lifecycle.
🧩 Client-managed encryption (CME) → ✅ (Correct Answer)
Clients can create and control their own encryption keys.
Keys are stored and managed using:
IBM Cloud Key Protect, or
IBM Cloud Hyper Protect Crypto Services (for higher FIPS-certified protection).
Clients can rotate, disable, or delete keys at their discretion.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Malex68
1 month ago