Questions tagged [always-encrypted]

Always Encrypted is a feature of Microsoft SQL Server 2016 and Azure SQL Database, designed to protect sensitive data. It allows client applications to encrypt sensitive data without revealing the encryption keys to the database engine, so the data cannot be accessed either in flight, in server memory, or at rest.

Filter by
Sorted by
Tagged with
0
votes
1answer
191 views

Database backup and restore incase Always Encrypted feature is enabled

I would like to know that How SQL database backup and its restoration on other server will work if Always Encrypted feature is implemented on most of its tables? Thanks
0
votes
1answer
124 views

Domain Certificate Authority Generated Certificate and SQL Server - Keyset does not exist

I do not have much experience with certificates or certificate terminology, so I may be incorrect in how I title things. I am trying to use a domain issued certificate as the certificate used in the ...
0
votes
0answers
293 views

Azure sql database backup and exporting data-tier application

Currently i have an azure subscription in it has a server and a database. How could i setup azure SQL database backups that will run automatically for example every 15 mins? is there a way? if yes ...
0
votes
1answer
136 views

SQL Server Always Encrypted - Create an external table containing an encrypted column

I'm trying to create an external table MyTable on server S2 that references the table MyTable from server S1. The table MyTable contains a column encrypted using Always Encrypted. I'd like the column ...
0
votes
0answers
222 views

Always Encrypted returning Timeout error

I am trying to encrypt a number of tables (1 column in multiple tables) in two different databases. On Database A I manage to encrypt these, while on database B it fails with an error: 'Unable to ...
0
votes
1answer
67 views

Data Security in MS SQL Server

How do I store the sensitive information on SQL server?. We have policy guidelines, DBA and Development engineers are not allowed to view the data as plain text. I am aware of the encryption ...
0
votes
1answer
159 views

Is it possible to store Always Encrypted master key an on-premises key vault? [closed]

I want to store the master key in a centralize key vault and have IIS access the key from there. I know I can use Azure Key Vault or local Windows key store, but I was looking for another option to ...
0
votes
1answer
59 views

How to remove an installed AE certificate from server using PowerShell Scripts?

I have created the encryption certificate using below PowerShell script in dev. environment. Now, I need to create deployment document to configure the encryption on staging environment. $cert = New-...
0
votes
1answer
683 views

Always Encrypted - Lock request time out period exceeded

I'm trying to encrypt a column and am getting the following error: Set-SqlColumnEncryption : Lock request time out period exceeded. Are there parameters to specify the lock timeout? What could be ...
0
votes
1answer
361 views

Always Encrypted after restoring an old database backup using C#

I have a Windows Form application. It allows users to restore a SQL Express database. Latest version of SQL Server in app now is SQL Server 2017. Customer can restore an old backup of a SQL Server ...
0
votes
2answers
910 views

How to rotate the CMK of Always Encrypted using SSMS?

I have implemented the encryption in SQL Server 2016 using Always Encrypted. I want to know how to rotate the column master key after the initial one year validity using SQL Server Management Studio ...
-1
votes
1answer
98 views

Does Always Encrypted cause blocking queries or locking object?

I have perform some test with relatively small tables and the encryption took a very long time (maybe because there are many SQL objects that are referring the target table). I am wondering(worrying)...
-2
votes
1answer
919 views

Type clash on update of always encrypted varchar in ssms 2017

I am using SSMS 17.6 and I am trying out the Always Encrypted feature. I was able to update/insert/search a datetime field by declaring a parameter and then using the parameter, e.g.: DECLARE @...

1
2