How to encrypt Compute Engine disks with Customer-Supplied Encryption Keys (CSEK)

In this lab demo, we're going to learn how to use our own keys to encrypt persistent disks in Compute Engine. One of the great things about Google Cloud is how everything is encrypted by default, and normally this is achieved using Google-managed keys. However, we may want to manage and provide our own keys for encryption, and Google calls this: Customer-Supplied Encryption Keys, or CSEK. In this video, we will create an encryption key, and wrap it with the Compute Engine RSA public key certificate. We will then encrypt a new persistent disk with the new key, attach the disk to a Compute Engine instance, and create a snapshot from the encrypted disk. You can learn more about using CSEKs on Google Cloud here: https://cloud.google.com/docs/security/encryption/customer-supplied-encryption-keys and find documentation on encrypting persistent disks here: https://cloud.google.com/compute/docs/disks/customer-supplied-encryption Let us know in the comments if you have any follow up questions, or what future lab demos you would like to see us record! Find out more about Appsbroker Academy at https://www.appsbroker.com/academy/ #cloud #googlecloud #googlecloudplatform #cloudtraining #encryption #security