Skip to content

Commit 636613a

Browse files
Merge pull request #30332 from Pietervanhove/patch-6
Update always-encrypted-enclaves.md
2 parents 809dbc8 + 32d20a1 commit 636613a

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

docs/relational-databases/security/encryption/always-encrypted-enclaves.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -219,6 +219,7 @@ The following limitations are specific to Always Encrypted with secure enclaves:
219219
- Tooling limitations:
220220
- The only supported key stores for storing enclave-enabled column master keys are Windows Certificate Store and Azure Key Vault.
221221
- To trigger an in-place cryptographic operation via `ALTER TABLE`/`ALTER COLUMN`, you need to issue the statement using a query window in SSMS or Azure Data Studio, or you can write your own program that issues the statement. Currently, the `Set-SqlColumnEncryption` cmdlet in the SqlServer PowerShell module and the Always Encrypted wizard in SQL Server Management Studio don't support in-place encryption. Move the data out of the database for cryptographic operations, even if the column encryption keys used for the operations are enclave-enabled.
222+
- When you restore a VBS enclave-enabled database, it's essential to reconfigure the VBS enclave setting again.
222223

223224
## Next steps
224225

0 commit comments

Comments
 (0)