Key Management is one of the most challenging parts of encryption. Learn how to rotate Always Encrypted keys to better secure your data.
- [Instructor] So Always Encrypted makes encryption…pretty transparent to the application.…The application just needs the…Always Encrypted driver installed,…and that driver's gonna automatically encrypt and decrypt…the sensitive data in the client application…using a key that's only accessible to the driver.…It also encrypts the data before passing…the data back to the database engine,…it also automatically rewrites query so that the semantics…to the application are preserved.…So if you have a query that says select star from table…where a customer ID equals two,…it will then encrypt that two value…to pass it to the database engine.…
It also decrypts data stored in encrypted columns…that are contained in query result,…so it does it both ways.…So there's a few places we can store our keys,…and this is really important to understand.…You can use Azure Key Vault,…which we'll talk a little bit more on the next slide.…And you wanna create these keys in that trusted key store,…or you can use a custom key security provider…
- Designing row-level security
- Using views to implement row-level security in SQL Server pre-2016
- Data encryption
- Configuring Always Encrypted
- Dynamic data masking
Skill Level Beginner
SQL Server 2017: Linux, Docker, and macOSwith Adam Wilbert1h 44m Intermediate
SQL Server Performance for Developerswith Joey D'Antoni3h 44m Intermediate
Course software1m 3s
1. Row-Level Security (RLS)
2. Encryption in SQL Server
3. Data Masking in SQL Server
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.