Share via


az sql mi tde-key

Manage a SQL Instance's encryption protector.

Commands

Name Description Type Status
az sql mi tde-key set

Sets the SQL Instance's encryption protector.

Core GA
az sql mi tde-key show

Shows a server encryption protector.

Core GA

az sql mi tde-key set

Sets the SQL Instance's encryption protector.

az sql mi tde-key set --server-key-type {AzureKeyVault, ServiceManaged}
                      [--auto-rotation-enabled {false, true}]
                      [--ids]
                      [--kid]
                      [--managed-instance]
                      [--resource-group]
                      [--subscription]

Required Parameters

--server-key-type -t

The type of the server key.

Accepted values: AzureKeyVault, ServiceManaged

Optional Parameters

--auto-rotation-enabled

The key auto rotation opt in status. Can be either true or false.

Accepted values: false, true
--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--kid -k

The Azure Key Vault key identifier of the server key. An example key identifier is "https://YourVaultName.vault.azure.net/keys/YourKeyName/01234567890123456789012345678901".

--managed-instance --mi

Name of the Azure SQL Managed Instance.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az sql mi tde-key show

Shows a server encryption protector.

az sql mi tde-key show [--ids]
                       [--managed-instance]
                       [--resource-group]
                       [--subscription]

Optional Parameters

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--managed-instance --mi

Name of the Azure SQL Managed Instance.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.