|
1 | 1 | --- |
2 | 2 | title: Connect to Server (Always Encrypted Page) Database Engine |
3 | | -description: "Connect to Server (Always Encrypted Page) Database Engine" |
| 3 | +description: Connect to Server (Always Encrypted Page) Database Engine. |
4 | 4 | author: erinstellato-ms |
5 | 5 | ms.author: erinstellato |
6 | 6 | ms.reviewer: maghan, randolphwest |
7 | | -ms.date: 11/03/2023 |
| 7 | +ms.date: 11/16/2023 |
8 | 8 | ms.service: sql |
9 | 9 | ms.subservice: ssms |
10 | 10 | ms.topic: ui-reference |
11 | 11 | f1_keywords: |
12 | 12 | - "sql13.swb.connecttosqlserver.alwaysencrypted.f1" |
13 | 13 | --- |
14 | 14 |
|
15 | | -# Connect to Server (Always Encrypted Page) Database Engine |
| 15 | +# Connect to Server (Always Encrypted page) - Database Engine |
16 | 16 |
|
17 | 17 | [!INCLUDE [SQL Server Azure SQL Database Azure SQL Managed Instance](../../includes/applies-to-version/sql-asdb-asdbmi.md)] |
18 | 18 |
|
19 | | -Use this tab to view or specify Always Encrypted column encryption options when connecting to Azure SQL Database, Azure SQL Managed Instance, or SQL Server. Use this tab to view or specify Always Encrypted secure enclave options when connecting to Azure SQL Database or SQL Server. Access this tab by selecting **Options >>** on the login tab. |
| 19 | +Use this tab to view or specify Always Encrypted column encryption options when connecting to Azure SQL Database, Azure SQL Managed Instance, or SQL Server. Use this tab to view or specify Always Encrypted secure enclave options when connecting to Azure SQL Database or SQL Server. Access this tab by selecting **Options >>** on the login tab. |
| 20 | + |
| 21 | +#### Enable Always Encrypted (column encryption) |
20 | 22 |
|
21 | | -**Enable Always Encrypted (column encryption)** |
22 | 23 | By default, Always Encrypted is disabled for a database connection. Enabling Always Encrypted for a database connection instructs the .NET Framework Data Provider for SQL Server, used by SQL Server Management Studio (SSMS), to attempt to transparently: |
23 | 24 |
|
24 | 25 | - Decrypt any values that are retrieved from encrypted columns and returned in query results. |
25 | 26 | - Encrypt the values of the parameterized Transact-SQL variables that target encrypted database columns. |
26 | 27 |
|
27 | | -SSMS uses the .NET Framework Data Provider for SQL Server. If you don't enable Always Encrypted for a connection, the .NET Framework Data Provider doesn't try to encrypt query parameters or decrypt results. For more information, see [Query columns using Always Encrypted with SSMS](../../relational-databases/security/encryption/always-encrypted-query-columns-ssms.md). |
| 28 | +SSMS uses the .NET Framework Data Provider for SQL Server. If you don't enable Always Encrypted for a connection, the .NET Framework Data Provider doesn't try to encrypt query parameters or decrypt results. For more information, see [Query columns using Always Encrypted with SQL Server Management Studio](../../relational-databases/security/encryption/always-encrypted-query-columns-ssms.md). |
| 29 | + |
| 30 | +#### Enable secure enclaves |
28 | 31 |
|
29 | | -**Enable secure enclaves** |
30 | 32 | Enable this option when connecting to a database configured to use Always Encrypted with secure enclaves. For more information, see [Getting started using Always Encrypted with secure enclaves](/azure/azure-sql/database/always-encrypted-enclaves-getting-started). |
31 | 33 |
|
32 | 34 | ## Enclave attestation |
33 | 35 |
|
34 | | -**Protocol:** |
| 36 | +#### Protocol |
| 37 | + |
35 | 38 | Select the attestation protocol to use when connecting to a database configured to use Always Encrypted with secure enclaves. The protocol value determines: |
36 | 39 |
|
37 | 40 | - If the client app uses attestation, and, if so, |
38 | | -- It specifies the type of the attestation service it uses. |
| 41 | +- It specifies the type of the attestation service it uses. |
39 | 42 |
|
40 | 43 | Available options are **None**,**Host Guardian Service**, and **Microsoft Azure Attestation**. For more information, see [Always Encrypted with secure enclaves](../../relational-databases/security/encryption/always-encrypted-enclaves.md#secure-enclave-attestation). |
41 | 44 |
|
42 | | -**URL:** |
43 | | -Enter the configured URL for the selected attestation protocol. The URL is specific to the type of enclave and SQL in use. |
| 45 | +#### URL |
| 46 | + |
| 47 | +Enter the configured URL for the selected attestation protocol. The URL is specific to the type of enclave and SQL in use. |
44 | 48 |
|
45 | 49 | - [Azure SQL Database with SGX enclaves](/azure/azure-sql/database/always-encrypted-enclaves-configure-attestation#determine-the-attestation-url-for-your-attestation-policy) |
46 | 50 | - [SQL Server](../../relational-databases/security/encryption/always-encrypted-enclaves-host-guardian-service-deploy.md) |
47 | 51 |
|
48 | | -Attestation isn't supported for Azure SQL Database with VBS enclaves. The URL option is disabled if **None** is selected for **Protocol:**. |
49 | | - |
50 | | -## Next Steps |
| 52 | +Attestation isn't supported for Azure SQL Database with VBS enclaves. The URL option is disabled if **None** is selected for **Protocol**. |
51 | 53 |
|
52 | | -For more examples on how to use Always Encrypted features with SSMS, review the following tutorials: |
| 54 | +## Related content |
53 | 55 |
|
54 | 56 | - [Tutorial: Getting started using Always Encrypted with secure enclaves in SQL Server with attestation using HGS](../../relational-databases/security/tutorial-getting-started-with-always-encrypted-enclaves-hgs.md) |
55 | 57 | - [Tutorial: Getting started using Always Encrypted with Intel SGX enclaves in Azure SQL Database](/azure/azure-sql/database/always-encrypted-enclaves-getting-started-sgx) |
|
0 commit comments