I'm new to SQL encryption and have a SQL Server 2012 database. The database itself needs to be accessible by DBAs but the data within one of the columns a table should only be viewable in plain text by a few users.
To do this, I tried using a Symmetric Key to encrypt the column which works fine. However, I don't see the security in this as any of the DBAs who have access to the database also have access to the key (seems to be stored within the 'Security' folder in Management Studio).
How can I ensure that only certain users have access to the key itself so that it can be decrypted even if more users have access to the database itself?
If there's a parameter I can pass from the app, that works for me too (C#/WPF)