Rod Edwards starts a series on Always Encrypted:
For the purposes of this post, i’m going to show how to set up Always Encrypted for column data held in an OnPrem SQL Server (which could be MI, or Azure SQL DB ) using keys stored in Azure Key Vault. And showing you some of the many potential issues that you need to be aware of along the way.
I’m not going to talk about the Secure Enclaves flavour here, just the ‘common or garden’ Always Encrypted.
Read on to learn more.