store SQL DB(onprem) TDE KEY in Azure key vault

Alfred Lim 0

Hi there,

I'm not familiar with both of these, but have a customer request to store the TDE key, into Azure key vault. is this means that i just require to import the TDE key into azure key vault?

i had tried google, is the azure key vault act as a password storage?

1 answer

Luke Murray 11,246 Reputation points MVP

2023-01-30T02:39:23.7166667+00:00
Thats right, you can store it using Azure Key Vault.

PowerShell and Azure CLI: Enable Transparent Data Encryption with customer-managed key from Azure Key Vault

Azure SQL transparent data encryption with customer-managed key

TDE customer-managed keys in Azure SQL Database
Please sign in to rate this answer.
Alfred Lim 0 Reputation points

2023-01-31T00:57:50.0733333+00:00

@Luke Murray somehow i can't see your answer in the post.

If i import the TDE key into the azure key vault, will it affect the production? i presume it is a standalone process? as i want to try it in a test environment before implementing it to customer.

Secondly, my customer SQL version is 2017, will it stop me to using azure key vault?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

store SQL DB(onprem) TDE KEY in Azure key vault

1 answer

Your answer