---
schema_version: "1"
id: fba2e8ed602046e69883fce7185a722f9450dba351bfb481712a2eab244c4c72
title: Uploading an Asymmetric Key for Azure Blob Storage FAQ
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/platform_o_key_azure_blob_faqs.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.platform_o_key_azure_blob_faqs.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: ca7ff795684f0e7436410f364f29771d4b684d84db543e0005397e1d39633dd1
description: Find answers to questions regrading the process, encryption, and other important considerations when migrating data to Azure Blob storage.
products:
  - Security
  - Salesforce Platform
release: "264"
---
# Uploading an Asymmetric Key for Azure Blob Storage FAQ

Find answers to questions regrading the process, encryption, and other important considerations when migrating data to Azure Blob storage.

For instructions on generating and uploading the key, see [Upload an Asymmetric Key for Azure Blob Storage](https://help.salesforce.com/s/articleView?id=platform.platform_o_key_azure_blob.htm&release=264.0.0&type=5 "Own is migrating to Azure Blob storage, a highly scalable and reliable object storage service. This requires customers with Bring Your Own Key (BYOK) to generate an asymmetric encryption key, as the existing Azure Disk storage uses symmetric keys.")

## FAQs

- Q. How long will the migration of my data take?
    
    A. The migration of data is dependent on the amount of data currently stored and the speed of Azure to move from a disk storage to an object storage.
- Q. Will my data remain encrypted?
    
    A. Your data is already encrypted at rest. The data will remain encrypted in transit and will be re-encrypted with the new key on the new Blob Storage. The data will remain encrypted throughout the entire migration process.
- Q. Where is my data stored during the re-encryption process?
    
    A. The re-encryption process takes place in memory, in an isolated processing space dedicated to each Customer Data environment.
- Q. Will my data be accessible in the migration process?
    
    A. Yes
- Q. What happens to the disks and snapshots that previously contained my data?
    
    A. Once all data is migrated, the disk will be removed
- Q. What happens to my new backups once I provide the updated key? Are they on Blob or on Disk, to be migrated when the migration is complete?
    
    A. It can take time for the migration process to complete. After submitting the new key there might be a period of time that (new) backups will still be written on disk with the old key until the migration process is completed.
- Q. How is my data segregated from other tenants in the new Blob Storage?
    
    A. As a Customer using BYOK, you will have a unique Blob Storage account namespace that segregates and isolates your Customer Data using Cloud Service Provider Identity and Access Management controls.
- Q. What visibility will I have throughout the migration processes (notifications, status update, etc.)?
    
    A. The master admin of the account will get an email once the migration is completed and all backups are stored and encrypted with the new key
- Q. Can we get a copy of the architecture diagram showing the new Blob Storage?
    
    A. The newest architecture diagram.
    
    ![New blob storage architecture diagram](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-own_from_salesforce-264-0-0-production-enus/8ac98673-ede2-4046-a41e-2d5c846f24ff/own_from_salesforce/images/platform_o_new_blob_storage.png)