Set up & manage customer managed keys cmk

On this page: Set up and manage customer managed keys (CMK) so you can encrypt your Adobe Journey Optimizer data with your own keys and keep it protected in transit and at rest.

AVAILABILITY
Customer Managed Keys functionality is currently available only for organizations that have purchased the Healthcare Shield or Privacy & Security Shield add-on offering.

With Adobe Journey Optimizer, Healthcare Shield and Privacy & Security Shield customers have the ability to leverage Azure Customer Managed Keys (CMK) and apply them to their data.

The setup process for Journey Optimizer involves two parts, leveraging technology from both Adobe Experience Platform and Customer Journey Analytics (CJA):

To go through the setup process, you can refer to the step-by-step detailed instructions in Customer Managed Keys in Adobe Experience Platform documentation.

Both Adobe Experience Platform and Customer Managed Keys ensure the security of your data by encrypting it in transit and at rest. Your data remains protected, regardless of whether you use Customer Managed Keys.

For more information on data encryption in Adobe Experience Platform, you can refer to the documentation on Data encryption.

AI Knowledge Reference

This section contains structured knowledge intended to support interpretation, retrieval, and question answering related to this topic.

For complete understanding, this information should be combined with the documentation on this page. Neither source is intended to stand alone; the page describes the feature, while this section provides additional context that helps disambiguate terminology, intent, applicability, and constraints.

  • TL;DR: This page explains how to set up and manage Azure customer managed keys (CMK) so you can encrypt your Adobe Journey Optimizer data with your own keys and keep it protected in transit and at rest.

Intents:

  • Understand what customer managed keys (CMK) provide in Journey Optimizer
  • Learn the two-part setup process across Adobe Experience Platform and Customer Journey Analytics
  • Understand which add-on offerings are required to use CMK
  • Understand how data is encrypted in transit and at rest

Glossary:

  • Customer Managed Keys (CMK): Azure customer managed keys that Healthcare Shield and Privacy & Security Shield customers can leverage and apply to their data to encrypt Adobe Journey Optimizer data with their own keys (product-specific)
  • Healthcare Shield: add-on offering; the Customer Managed Keys functionality is currently available only for organizations that have purchased the Healthcare Shield or Privacy & Security Shield add-on offering (product-specific)
  • Privacy & Security Shield: add-on offering; the Customer Managed Keys functionality is currently available only for organizations that have purchased the Healthcare Shield or Privacy & Security Shield add-on offering (product-specific)
  • Customer Journey Analytics (CJA): certain components are used in the background during CMK setup, so the CJA portion of the setup must be completed even if CJA has not been purchased (product-specific)

Guardrails:

  • Customer Managed Keys functionality is currently available only for organizations that have purchased the Healthcare Shield or Privacy & Security Shield add-on offering (availability constraint)
  • The setup process involves two parts, leveraging technology from both Adobe Experience Platform and Customer Journey Analytics (CJA)
  • Completing the Customer Journey Analytics portion of the setup is necessary even if CJA has not been purchased, because certain CJA components are used in the background
  • Data is encrypted in transit and at rest, and remains protected regardless of whether Customer Managed Keys are used

Terminology:

  • Canonical name: Customer Managed Keys — Acronym: CMK — variants: customer managed keys, Azure Customer Managed Keys

FAQ:

  • Q: Who can use Customer Managed Keys? — Organizations that have purchased the Healthcare Shield or Privacy & Security Shield add-on offering.
  • Q: Do you need to complete the Customer Journey Analytics setup even without purchasing CJA? — Yes, because certain CJA components are used in the background.
  • Q: Is data encrypted even if you do not use CMK? — Yes, both Adobe Experience Platform and Customer Managed Keys encrypt data in transit and at rest, and data remains protected regardless of whether CMK is used.
  • Q: What are the two parts of the setup? — One part in Adobe Experience Platform and one part in Customer Journey Analytics.

Personas:

  • developer: Can set up Customer Managed Keys by completing the two-part process that uses Adobe Experience Platform and Customer Journey Analytics technology. Can apply these keys to encrypt Journey Optimizer data so it stays protected in transit and at rest. The page states that the Customer Journey Analytics portion of the setup is necessary even without purchasing Customer Journey Analytics, because certain components are used in the background. Where: “Set up & manage customer managed keys”.
  • marketer: Can rely on Journey Optimizer data being encrypted in transit and at rest. The page states that data remains protected regardless of whether Customer Managed Keys are used. Where: “Guardrails”.
  • admin: Can complete the two-part setup process, following the steps in the Adobe Experience Platform documentation and the Customer Journey Analytics documentation. The page states that completing the Customer Journey Analytics portion is necessary even without purchasing Customer Journey Analytics, because certain components are used in the background. Where: “Set up & manage customer managed keys”.
  • decision-maker: Can determine whether Customer Managed Keys apply to the organization, since the functionality is currently available only to organizations that purchased the Healthcare Shield or Privacy & Security Shield add-on offering. The page states that data remains encrypted in transit and at rest whether or not Customer Managed Keys are used. Where: “Guardrails”.

Onboarding:

  • Level: Intermediate
  • First minimal step: Follow the steps outlined in the Customer Managed Keys in Adobe Experience Platform documentation.
recommendation-more-help
journey-optimizer-help