Is SharePoint Server 2019 or SharePoint Server Subscription Edition compatible with SQL Always Encrypted?

Question

Hello,

Is SharePoint Server 2019 or SharePoint Server Subscription Edition compatible with SQL Always Encrypted?

https://learn.microsoft.com/en-us/sql/relational-databases/security/encryption/always-encrypted-database-engine?view=sql-server-ver16

Unfortunately, I can't find any official sources on this; only SharePoint Server 2016 has a semi-official reference:

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/sharepoint-2013-2016-and-sql-server-2016-supportability-with/ba-p/333312

Thanks a lot!

Regards,

Arthur

Answer 1

Always Encrypted is not supported for SharePoint. This is because SharePoint uses dynamic SQL queries that are not compatible with Always Encrypted, which requires parameterized queries. The only supported encryption methods for SharePoint are:

1. Transparent Data Encryption (TDE). Encryption at rest.
2. BitLocker can be used on the SQL database volumes. Encryption at rest.
3. Information Rights Management (IRM can be used to encrypt the documents at the library level and protects the data in transit and in use. However, it does not protect the data at rest, and it requires Active Directory Rights Management Services (AD RMS) or Azure Rights Management Services (Azure RMS).