Questions tagged [always-encrypted]

Always Encrypted is a feature of Microsoft SQL Server 2016 and Azure SQL Database, designed to protect sensitive data. It allows client applications to encrypt sensitive data without revealing the encryption keys to the database engine, so the data cannot be accessed either in flight, in server memory, or at rest.

17 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
1
vote
0answers
72 views

SQL Server Security - Encryption

I have requirement to store the some sensitive information in SQL Server 2016. Organization policy demands, it should be encrypted. Business Requirement: Data cannot be decrypted by DBA. Data cannot ...
1
vote
0answers
79 views

SSIS: Error from ODBC provider when inserting into Always Encrypted table using CMK in Azure Key Store

I'm trying to use SSIS (Visual Studio 2017) to insert data into an Azure SQL table with a column that's encrypted via Always Encrypted, and a column master key stored in Azure Key Vault, but I keep ...
1
vote
0answers
128 views

Case insensitive search on Always Encrypted columns

How would one go about doing a case-insensitive search on a column encrypted with Always Encrypted? The problem arises when you encrypt email addresses for example. When encrypted, John.Doe@gmail.com ...
1
vote
0answers
302 views

How to create encryption certificate using PowerShell in Windows Server 2012 R2?

I'm implementing the Always Encrypted feature in SQL Server 2016. I have tried to create the certificate using PowerShell in Windows 10 environment as per the below article. https://docs.microsoft....
1
vote
0answers
32 views

Always Encrypted 'where' on multiple values

I understand why SQL won't allow this, I want to know if there is some way around this that will allow me to do a where on an encrypted column with multiple values? I have tried to use a TVP, but SQL ...
0
votes
0answers
23 views

Encryption procedure other than Always Encrypted

I would like to ask if there are other encryption method in MS SQL other than always encrypted?
0
votes
1answer
29 views

How to Configure Always Encrypted using PowerShell

I just want to ask if there is a way to configure always encrypted columns using power shell? like for example i want to encrypt a column in a table with deterministic using powershell codes?
0
votes
0answers
14 views

Using CONVERT on Always Encrypted varbinary column

I have an encrypted varbinary column that contains data that I wish to convert to varchar using the CONVERT() function. I am using Always Encrypted = ON and Column Encryption Setting = Enabled for my ...
0
votes
1answer
25 views

Database backup and restore incase Always Encrypted feature is enabled

I would like to know that How SQL database backup and its restoration on other server will work if Always Encrypted feature is implemented on most of its tables? Thanks
0
votes
0answers
24 views

Azure Database Encryption (ERROR ON WEB APP)

Currently I have an azure subscription which has a server and database. I already encrypt a column in a table. i am using "always encrypted" method. Now I want to generate a .pfx file after I ...
0
votes
0answers
59 views

Azure sql database backup and exporting data-tier application

Currently i have an azure subscription in it has a server and a database. How could i setup azure SQL database backups that will run automatically for example every 15 mins? is there a way? if yes ...
0
votes
0answers
40 views

Any way to get a key stored in the Azure Key Vault when retrieving Always Encrypted data through SSRS?

If you are using Always Encrypted and the key is stored in the Azure key vault, is there any way to use on-prem SSRS to view the encrypted data? Obviously with the client application this can be coded....
0
votes
0answers
74 views

Always Encrypted returning Timeout error

I am trying to encrypt a number of tables (1 column in multiple tables) in two different databases. On Database A I manage to encrypt these, while on database B it fails with an error: 'Unable to ...
0
votes
1answer
50 views

Data Security in MS SQL Server

How do I store the sensitive information on SQL server?. We have policy guidelines, DBA and Development engineers are not allowed to view the data as plain text. I am aware of the encryption ...
0
votes
1answer
47 views

How to remove an installed AE certificate from server using PowerShell Scripts?

I have created the encryption certificate using below PowerShell script in dev. environment. Now, I need to create deployment document to configure the encryption on staging environment. $cert = New-...
0
votes
1answer
79 views

Does Always Encrypted cause blocking queries or locking object?

I have perform some test with relatively small tables and the encryption took a very long time (maybe because there are many SQL objects that are referring the target table). I am wondering(worrying)...
0
votes
2answers
460 views

How to rotate the CMK of Always Encrypted using SSMS?

I have implemented the encryption in SQL Server 2016 using Always Encrypted. I want to know how to rotate the column master key after the initial one year validity using SQL Server Management Studio ...