From the course: Microsoft Azure Database Administrator Associate (DP-300) Cert Prep by Microsoft Press

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Implement Always Encrypted with VBS enclaves

Implement Always Encrypted with VBS enclaves

From the course: Microsoft Azure Database Administrator Associate (DP-300) Cert Prep by Microsoft Press

Start my 1-month free trial Buy for my team

Implement Always Encrypted with VBS enclaves

“

- Welcome back, this is lesson 5.5: Implement Always Encrypted with VBS Enclaves. So in the last video, we talked about Always Encrypted and discussed how it can be used to secure sensitive data at the column level. Always Encrypted with Secure Enclaves enhances Always Encrypted by enabling additional in place encryption capabilities and overcoming the limitations of Always Encrypted. So for example, Always Encrypted protects data by encrypting it on the client side without allowing the data to show up as clear text in the data. This restricts the functionality on encrypted columns in the database. There's also the restriction of pattern matching on encrypted columns. With Always Encrypted Secure Enclaves, This addresses these limitations by allowing some of these computations inside a secure enclave on the server side. Now you're asking what is a secure enclave? This is a protected section of memory in the database engine process. You've probably heard this called VBS Enclaves, but…

Contents