Table of Contents
Summary
- Microsoft Purview Customer Key support for Windows 365 Frontline in shared mode will be generally available, enhancing data protection.
- Newly provisioned Cloud PCs will be automatically encrypted using the tenant-specific Customer Key for organizations that have onboarded it.
- Existing Cloud PCs will not be affected by this change.
- There is no option to opt-out of Customer Key for new Cloud PC provisioning once enabled.
- Organizations are encouraged to review their Customer Key configuration and inform security and compliance teams about this update.
Admin Impact: Medium
User Impact: Low
Release Start: 26 Jan 2026
Release End: 31 Jan 2026
Services: Windows 365
Category: Plan for change
Tags: User Adoption, Admin Action
History
1/3/2026 Item Added to Message Center
Microsoft Message
Microsoft Purview Customer Key support for Windows 365 Frontline in shared mode will reach general availability in late January 2026. This update applies to customers who have onboarded Customer Key in Microsoft Purview and who hold Windows 365 Frontline licenses. After general availability, any newly provisioned Cloud PCs in these environments will be protected automatically using Microsoft Purview Customer Key.
How will this affect your organization?
Beginning in late January 2026, Windows 365 Frontline in shared mode will support Microsoft Purview Customer Key (formerly Customer Managed Key).
Because Customer Key is applied at the tenant level, customers who have already onboarded Customer Key in Microsoft Purview will have all newly provisioned Windows 365 Frontline Cloud PCs in shared mode automatically encrypted using their tenant-specific Customer Key.
Additional notes:
- There is no opt-out option for newly provisioned Cloud PCs once Customer Key is enabled for the tenant.
- This update aligns Windows 365 Frontline with existing Microsoft 365 Customer Key behavior and provides consistent data-protection controls across services.
What you need to do to prepare
No action is required at this time. We recommend reviewing your organization’s Customer Key configuration and ensuring that your security and compliance teams are aware of this upcoming change.
Customer Impact
- If your organization has enabled Customer Key in Microsoft Purview, all newly provisioned Windows 365 Frontline Cloud PCs will automatically be encrypted using Customer Key.
- Existing Cloud PCs are not affected.
- There is currently no customer-controlled setting to disable Customer Key usage for new Cloud PC provisioning once Customer Key is onboarded in Purview.
Additional Information
Set up Microsoft Purview Customer Key for Windows 365 Cloud PCs