We have a database using the AlwaysEncrypted feature of SQL Server 2016.
We need to create SSIS packages (deployed on SSISDB) for certain application tasks.
What options we have to store the key securely so those SSIS packages can use that key to decipher the data. Assuming the application DB and SSISDB are on same server
Alternatively, Would it be mandatory/good practice to have the application DB and SSISDB both on different servers ?