| title | sys.column_encryption_key_values (Transact-SQL) | ||||
|---|---|---|---|---|---|
| description | sys.column_encryption_key_values (Transact-SQL) | ||||
| author | jaszymas | ||||
| ms.author | jaszymas | ||||
| ms.date | 10/15/2019 | ||||
| ms.service | sql | ||||
| ms.subservice | system-objects | ||||
| ms.topic | reference | ||||
| f1_keywords |
|
||||
| helpviewer_keywords |
|
||||
| dev_langs |
|
||||
| monikerRange | =azuresqldb-current||>=sql-server-2016||>=sql-server-linux-2017||=azuresqldb-mi-current |
[!INCLUDE SQL Server Azure SQL Database Azure SQL Managed Instance]
Returns information about encrypted values of column encryption keys (CEKs) created with either the CREATE COLUMN ENCRYPTION KEY or the ALTER COLUMN ENCRYPTION KEY (Transact-SQL) statement. Each row represents a value of a CEK, encrypted with a column master key (CMK).
| Column name | Data type | Description |
|---|---|---|
| column_encryption_key_id | int | ID of the CEK in the database. |
| column_master_key_id | int | ID of the column master key that was used to encrypt the CEK value. |
| encrypted_value | varbinary(8000) | CEK value encrypted with the CMK specified in column_master_key_id. |
| encryption_algorithm_name | sysname | Name of an algorithm used to encrypt the CEK value. Name of the encryption algorithm used to encrypt the value. The algorithm for the system providers must be RSA_OAEP. |
Requires the VIEW ANY COLUMN ENCRYPTION KEY permission.
[!INCLUDEssCatViewPerm] For more information, see Metadata Visibility Configuration.
CREATE COLUMN ENCRYPTION KEY (Transact-SQL)
ALTER COLUMN ENCRYPTION KEY (Transact-SQL)
DROP COLUMN ENCRYPTION KEY (Transact-SQL)
CREATE COLUMN MASTER KEY (Transact-SQL)
Security Catalog Views (Transact-SQL)
sys.column_encryption_keys (Transact-SQL)
sys.column_master_keys (Transact-SQL)
sys.columns (Transact-SQL)
Always Encrypted
Always Encrypted with secure enclaves
Overview of Key Management for Always Encrypted
Manage keys for Always Encrypted with secure enclaves