Key Management is one of the most challenging parts of encryption. Learn how to rotate Always Encrypted keys to better secure your data.
- [Instructor] So Always Encrypted makes encryption…pretty transparent to the application.…The application just needs the…Always Encrypted driver installed,…and that driver's gonna automatically encrypt and decrypt…the sensitive data in the client application…using a key that's only accessible to the driver.…It also encrypts the data before passing…the data back to the database engine,…it also automatically rewrites query so that the semantics…to the application are preserved.…So if you have a query that says select star from table…where a customer ID equals two,…it will then encrypt that two value…to pass it to the database engine.…
It also decrypts data stored in encrypted columns…that are contained in query result,…so it does it both ways.…So there's a few places we can store our keys,…and this is really important to understand.…You can use Azure Key Vault,…which we'll talk a little bit more on the next slide.…And you wanna create these keys in that trusted key store,…or you can use a custom key security provider…
Author
Released
9/19/2018- Designing row-level security
- Using views to implement row-level security in SQL Server pre-2016
- Data encryption
- Configuring Always Encrypted
- Dynamic data masking
Skill Level Beginner
Duration
Views
Related Courses
-
Learning SQL Server 2017
with Adam Wilbert1h 21m Beginner -
SQL Server 2017: Linux, Docker, and macOS
with Adam Wilbert1h 44m Intermediate -
SQL Server 2017: What's New
with Adam Wilbert1h 22m Beginner -
SQL Server Performance for Developers
with Joey D'Antoni3h 44m Intermediate
-
Introduction
-
Course software1m 3s
-
1. Row-Level Security (RLS)
-
Demo: Row-level security2m 37s
-
Implement row-level security2m 16s
-
Demo: RLS with views3m 7s
-
2. Encryption in SQL Server
-
What data should I encrypt?3m 34s
-
Cell-level encryption3m 12s
-
Demo: Cell-level encryption3m 30s
-
Always Encrypted3m 58s
-
Manage Always Encrypted keys3m 36s
-
3. Data Masking in SQL Server
-
Data masking and SQL Server2m 45s
-
Demo: Dynamic data masking2m 37s
-
Limits of dynamic masking2m 30s
-
-
Conclusion
-
Next steps17s
-
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.
CancelTake notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.
Share this video
Embed this video
Video: Manage Always Encrypted keys