Skip to content

always-encrypted-enclaves-manage-keys.md

Latest commit

 

History

History
36 lines (27 loc) · 1.83 KB

always-encrypted-enclaves-manage-keys.md

File metadata and controls

36 lines (27 loc) · 1.83 KB
title Manage keys for Always Encrypted with secure enclaves
description Manage keys for Always Encrypted with secure enclaves
author jaszymas
ms.author jaszymas
ms.reviewer vanto
ms.date 05/24/2022
ms.service sql
ms.subservice security
ms.topic concept-article
monikerRange >= sql-server-ver15

Manage keys for Always Encrypted with secure enclaves

[!INCLUDE sqlserver2019-windows-only-asdb]

Always Encrypted with secure enclaves extends key management for Always Encrypted by introducing enclave-enabled keys:

  • Enclave-enabled column master key - a column master key that is created with the ENCLAVE_COMPUTATIONS property specified in the column master key metadata object inside the database.
  • Enclave-enabled column encryption key - a column encryption key that is encrypted with an enclave-enabled column master key. Only enclave-enabled column encryption keys can be used for computations inside a server-side secure enclave.

The general guidelines and processes for managing Always Encrypted keys apply to managing enclave-enabled keys.

Managing keys

The following articles discuss the aspects specific to managing enclave-enabled keys.

Next steps

See also