IBM Cloud Docs
Determine whether your deployment region and key management system support Bring Your Own Key (BYOK) for backups

Determine whether your deployment region and key management system support Bring Your Own Key (BYOK) for backups

To determine whether your Cloud Databases deployment region and key management system support Bring Your Own Key (BYOK) for backups, follow this procedure:

Prerequisites

Before beginning this tutorial, make sure that you have created or installed the following resources and tools.

Match backup region location with data location requirements

  1. Ensure that the backup region location matches your data location requirements, see Backup Locations Cloud Object chart. Backup location differs per database region. Ensure that the backup region location matches your data location requirements.

  2. Check whether the Cloud Databases broker configuration permits the key region:

    Cloud Databases instance location and key region support
    Instance location Key region supported
    us-east us-south
    us-south us-south
    eu-fr2 eu-de, eu-fr2
    eu-de eu-de

Configure failover

Creating Cross region buckets with a root key from a Hyper Protect Crypto Services (HPCS) instance requires that instance to be configured with failover configuration.

Confirm that failover is properly configured for the selected HPCS instance correctly using either the IBM Cloud console or CLI. For more information, see Creating Cross region buckets.