Turn off key based access on cache account

Previously, key-based access was required for cache storage accounts used by Azure Site Recovery. Azure Site Recovery now supports cache accounts with key-based authentication disabled. This article explains how to turn off key-based access without disrupting replication.

Prerequisites

Before proceeding, ensure the following:

• Enable Managed Identity on the Recovery Services Vault

• Grant access to Recovery services vault managed identity to read-write to cache account

Turn off key-based access on storage accounts

For higher security of Azure storage, we recommend you to turn off of key-based authentication.

Scenario 1

If the Recovery Services Vault already has a managed identity enabled, follow the steps in the Related Content.

Scenario 2

If the vault lacked a managed identity when virtual machines were initially protected, you can add it afterward. Once prerequisites are met, you can safely disable key-based access on the cache account.

Related content

• Disable shared key authorization on cache accounts