Questions tagged [always-encrypted]

Always Encrypted is a feature of Microsoft SQL Server 2016 and Azure SQL Database, designed to protect sensitive data. It allows client applications to encrypt sensitive data without revealing the encryption keys to the database engine, so the data cannot be accessed either in flight, in server memory, or at rest.

0
votes
2answers
400 views

How to rotate the CMK of Always Encrypted using SSMS?

I have implemented the encryption in SQL Server 2016 using Always Encrypted. I want to know how to rotate the column master key after the initial one year validity using SQL Server Management Studio ...
0
votes
1answer
47 views

Data Security in MS SQL Server

How do I store the sensitive information on SQL server?. We have policy guidelines, DBA and Development engineers are not allowed to view the data as plain text. I am aware of the encryption ...
0
votes
1answer
44 views

How to remove an installed AE certificate from server using PowerShell Scripts?

I have created the encryption certificate using below PowerShell script in dev. environment. Now, I need to create deployment document to configure the encryption on staging environment. $cert = New-...
0
votes
1answer
72 views

Does Always Encrypted cause blocking queries or locking object?

I have perform some test with relatively small tables and the encryption took a very long time (maybe because there are many SQL objects that are referring the target table). I am wondering(worrying)...
1
vote
0answers
102 views

Case insensitive search on Always Encrypted columns

How would one go about doing a case-insensitive search on a column encrypted with Always Encrypted? The problem arises when you encrypt email addresses for example. When encrypted, John.Doe@gmail.com ...
1
vote
0answers
263 views

How to create encryption certificate using PowerShell in Windows Server 2012 R2?

I'm implementing the Always Encrypted feature in SQL Server 2016. I have tried to create the certificate using PowerShell in Windows 10 environment as per the below article. https://docs.microsoft....
1
vote
0answers
28 views

Always Encrypted 'where' on multiple values

I understand why SQL won't allow this, I want to know if there is some way around this that will allow me to do a where on an encrypted column with multiple values? I have tried to use a TVP, but SQL ...
0
votes
0answers
7 views

SSIS: Error from ODBC provider when inserting into Always Encrypted table using CMK in Azure Key Store

I'm trying to use SSIS (Visual Studio 2017) to insert data into an Azure SQL table with a column that's encrypted via Always Encrypted, and a column master key stored in Azure Key Vault, but I keep ...
0
votes
0answers
21 views

Azure Database Encryption (ERROR ON WEB APP)

Currently I have an azure subscription which has a server and database. I already encrypt a column in a table. i am using "always encrypted" method. Now I want to generate a .pfx file after I ...
0
votes
0answers
15 views

Azure sql database backup and exporting data-tier application

Currently i have an azure subscription in it has a server and a database. How could i setup azure SQL database backups that will run automatically for example every 15 mins? is there a way? if yes ...
0
votes
0answers
35 views

Any way to get a key stored in the Azure Key Vault when retrieving Always Encrypted data through SSRS?

If you are using Always Encrypted and the key is stored in the Azure key vault, is there any way to use on-prem SSRS to view the encrypted data? Obviously with the client application this can be coded....
0
votes
0answers
46 views

Always Encrypted returning Timeout error

I am trying to encrypt a number of tables (1 column in multiple tables) in two different databases. On Database A I manage to encrypt these, while on database B it fails with an error: 'Unable to ...
0
votes
0answers
162 views

When to run sp_refresh_parameter_encryption while using Always Encrypted?

I'm implementing Always Encrypted feature for an ASP.NET Application using SQL Server 2016. I have applied deterministic encryption on first five tables and created few stored procedures that ...