DROP COLUMN ENCRYPTION KEY (Transact-SQL)

Applies to: SQL Server 2016 (13.x) and later Azure SQL Database Azure SQL Managed Instance

Drops a column encryption key from a database.

Transact-SQL syntax conventions

Syntax

syntaxsql

DROP COLUMN ENCRYPTION KEY key_name [;]  

Arguments

key_name
Is the name by which the column encryption key to be dropped from the database.

Remarks

A column encryption key cannot be dropped if it is used to encrypt any column in the database. All columns using the column encryption key must first be dropped.

Permissions

Requires ALTER ANY COLUMN ENCRYPTION KEY permission on the database.

Examples

A. Dropping a column encryption key

The following example drops a column encryption key called MyCEK.

SQL

DROP COLUMN ENCRYPTION KEY MyCEK;  
GO  

See Also

CREATE COLUMN ENCRYPTION KEY (Transact-SQL)
ALTER COLUMN ENCRYPTION KEY (Transact-SQL)
CREATE COLUMN MASTER KEY (Transact-SQL)
Always Encrypted
Always Encrypted with secure enclaves
Overview of Key Management for Always Encrypted
Manage keys for Always Encrypted with secure enclaves