Merge pull request #30 from saudmish/patch-16

Saud's encryption updates.

Author: ErikjeMS

windows-365/enterprise/encryption.md

@@ -34,19 +34,18 @@ Windows 365 encrypts data at rest and in transit as explained below.
 
 ## Encryption of data at rest
 
-To help you protect your organization's data, Windows 365 Enterprise and Business disks are encrypted with [Azure Storage server-side encryption (SSE)](/azure/storage/common/storage-service-encryption).
+To help you protect your organization's data, Windows 365 Enterprise and Business Cloud PC disks are encrypted with [Azure Storage server-side encryption (SSE)](/azure/storage/common/storage-service-encryption).
 
 This storage layer encryption provides the following benefits:
 
-- When persisting data to the cloud, data at rest on your Microsoft-hosted Cloud PC disks (OS and data) is automatically encrypted.
-- Windows 365 disk data is encrypted transparently using 256-bit Advanced Encryption Standard (AES) encryption, a modern block cipher, and is FIPS 140-2 compliant.
-- The encryption doesn't impact Cloud PC performance.
-- By default, the encryption is applied to every Cloud PC in every region at no extra cost.
-- All the following Windows 365 Enterprise and Business objects are automatically encrypted-at-rest with platform-managed keys (Customer-managed Keys aren't currently supported):
-  - Managed disks
+- When persisting data to the cloud, data at rest on your Microsoft-hosted Cloud PC's disk is automatically encrypted.
+- Windows 365 Cloud PC disks are encrypted transparently using 256-bit Advanced Encryption Standard (AES) encryption, a modern block cipher, and is FIPS 140-2 compliant. The encryption at this layer doesn't impact Cloud PC performance.
+- The encryption is applied to every Cloud PC in every region at no extra cost.
+
+The following Windows 365 Enterprise and Business objects are automatically encrypted-at-rest with platform-managed keys:
+  - Disks
   - Snapshots
   - Images
-  - Data written to existing managed disks
 
 Windows 365 as a service treats all data stored on Windows 365 disks as customer content. For more information, see [Privacy and personal data in Windows 365](/windows-365/enterprise/privacy-personal-data).
 
@@ -67,4 +66,4 @@ TLS 1.2 is used for all connections started from Windows 365 to the Azure Virtua
 
 For more information about the cryptographic modules underlying Azure managed disks, see [Cryptography API: Next Generation](/windows/desktop/seccng/cng-portal).
 
-For more information on network connectivity and encryption in transit, see [Understanding Azure Virtual Desktop network connectivity](/azure/virtual-desktop/network-connectivity).
+For more information on network connectivity and encryption of the RDP remoting connection, see [Understanding Azure Virtual Desktop network connectivity](/azure/virtual-desktop/network-connectivity).