managedHsmKeyId

To use customer managed keys from a managed HSM, provide the Managed HSM Key ID. To use service managed keys, omit this field.

Note: In order to use customer managed keys, the identity of the MSSQL Managed Instance must have the following permissions on the key vault: 'get', 'wrapKey' and 'unwrapKey' Note: If managed_instance_id denotes a secondary instance deployed for disaster recovery purposes, then the key_vault_key_id should be the same key used for the primary instance's transparent data encryption. Both primary and secondary instances should be encrypted with same key material.