Is Windows Operating System Level Data Protection API used to protect Service Master Key in the case of Azure SQL database?

Question

Is Windows Operating System Level Data Protection API used to protect Service Master Key in the case of Azure SQL database?

Kookkal, Gopikrishnan 0

Wanted to know whether Windows OS level Data Protection API is used to protect Service Master Key in the Azure SQL single database instance as well as Azure SQL Managed Instance?

GeethaThatipatri-MSFT 29,597 Reputation points Microsoft Employee Moderator

2023-07-08T03:08:56.58+00:00

Hi, @Kookkal, Gopikrishnan Thanks for posting your question on MS Q&A platform,

Both Azure SQL Single Database Instance and Azure SQL Managed Instance use the Windows OS level Data Protection API to protect the Service Master Key. however, you would need to check each on separately.

Not sure if this gives you enough but, this is what you can check from the documentation: https://learn.microsoft.com/en-us/azure/azure-sql/database/transparent-data-encryption-tde-overview?view=azuresql&tabs=azure-portal#service-managed-transparent-data-encryption

Regards

Geetha