configure-always-encrypted-enclaves.md

title	Configure and use Always Encrypted with secure enclaves| Microsoft Docs
ms.custom
ms.date	10/18/2019
ms.prod	sql
ms.prod_service	database-engine, sql-database
ms.reviewer	vanto
ms.technology	security
ms.topic	conceptual
author	jaszymas
ms.author	jaszymas
monikerRange	>= sql-server-ver15 || = sqlallproducts-allversions

Configure and use Always Encrypted with secure enclaves

[!INCLUDEtsql-appliesto-ssver15-xxxx-xxxx-xxx]

Always Encrypted with secure enclaves extends the existing Always Encrypted feature to enable richer functionality on sensitive data while keeping the data confidential. This article lists common tasks for configuring and using the feature.

For a tutorial that shows you how to quickly get started with Always Encrypted with secure enclaves, see Tutorial: Getting started with Always Encrypted with secure enclaves using SSMS.

Set up your environment to support enclaves and attestation

For details, see the following articles:

• Plan for Host Guardian Service attestation
• [Deploy the Host Guardian Service for [!INCLUDE ssnoversion-md]](./always-encrypted-enclaves-host-guardian-service-deploy.md)
• Register your computer with the Host Guardian Service

Manage keys for Always Encrypted with secure enclaves

See the following articles for details:

• Manage keys for Always Encrypted with secure enclaves - overview
• Provision enclave-enabled keys
• Rotate enclave-enabled keys

Configure columns with Always Encrypted with secure enclaves

See the following articles for details:

• Configure column encryption in-place using Always Encrypted with secure enclaves - overview
• Configure column encryption in-place with Transact-SQL
• Enable Always Encrypted with secure enclaves for existing encrypted columns

Note

For a step-by-step tutorial on how to set up a test environment and try the functionality of Always Encrypted with secure enclaves in SSMS, see Tutorial: Getting started with Always Encrypted with secure enclaves using SSMS.

Query columns using Always Encrypted with secure enclaves

See the following articles for details:

• Query columns using Always Encrypted with secure enclaves - overview
• Query columns using Always Encrypted with secure enclaves with SSMS

Create and use indexes on enclave-enabled columns

See the following articles for details:

• Create and use indexes on columns using Always Encrypted with secure enclaves

Develop applications using Always Encrypted with secure enclaves

See the following articles for details:

• Develop applications using Always Encrypted with secure enclaves