Skip to content

always-encrypted-enclaves-manage-keys.md

Latest commit

 

History

History
36 lines (28 loc) · 1.87 KB

always-encrypted-enclaves-manage-keys.md

File metadata and controls

36 lines (28 loc) · 1.87 KB
title Manage keys for Always Encrypted with secure enclaves | Microsoft Docs
ms.custom
ms.date 10/30/2019
ms.reviewer vanto
ms.prod sql
ms.prod_service database-engine, sql-database
ms.technology security
ms.topic conceptual
author jaszymas
ms.author jaszymas
monikerRange >= sql-server-ver15 || = sqlallproducts-allversions

Manage keys for Always Encrypted with secure enclaves

[!INCLUDE tsql-appliesto-ssver15-xxxx-xxxx-xxx-winonly]

Always Encrypted with secure enclaves extends key management for Always Encrypted by introducing enclave-enabled keys:

  • Enclave-enabled column master key - a column master key that is created with the ENCLAVE_COMPUTATIONS property specified in the column master key metadata object inside the database.
  • Enclave-enabled column encryption key - a column encryption key that is encrypted with an enclave-enabled column master key. Only enclave-enabled column encryption keys can be used for computations inside a server-side secure enclave.

The general guidelines and processes for managing Always Encrypted keys apply to managing enclave-enabled keys.

Managing keys

The following articles discuss the aspects specific to managing enclave-enabled keys.

Next Steps

See Also