SQL Server Connector for Microsoft Azure Key Vault - Public Preview

The SQL Server Connector for Microsoft Azure Key Vault enables SQL Server encryption to use the Microsoft Azure Key Vault as an extensible key management (EKM) provider to protect its encryption keys. An organization can use SQL Server encryption to protect sensitive data. SQL Server encryption includes Transparent Data Encryption (TDE), Column Level Encryption (CLE), and Backup Encryption. In all of these cases the data is encrypted using a symmetric data encryption key. The symmetric data encryption key is further protected by wrapping (encrypting) it with an asymmetric key. The EKM provider architecture lets Microsoft SQL Server leverage the security of the Azure Key Vault as an external cryptographic provider to store and manage the asymmetric keys and perform data encryption key wrapping and unwrapping functions. Azure Key Vault helps safeguard cryptographic keys and secrets used by cloud applications and services. By using Azure Key Vault, you can encrypt keys and secrets (such as authentication keys, storage account keys, data encryption keys, .PFX files, and passwords) by using keys that are protected by hardware security modules (HSMs). For added assurance, you can import or generate keys in HSMs (keys never leave the HSM boundary). HSMs are certified to FIPS 140-2 level 2. The download consists of the SQL Server Connector as well as Sample Scripts to enable a SQL Server Administrator learn how to configure the Connector and enable SQL Server Encryption scenarios. Starting with SQL Server Connector version 1.0.5.0 (March 2025), SQL Server 2025 Public Preview Arc enabled supports authentication with Azure Key Vault using managed identity.

Supported Operating Systems

Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, Windows Server 2019, Windows Server 2022, Windows Server 2025

Supported Operating Systems Windows Server 2022, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012 The SQL Server versions supported are: SQL Server 2025 Public Preview SQL Server 2022 RTM Enterprise 64-bit SQL Server 2019 RTM Enterprise 64-bit SQL Server 2017 RTM Enterprise 64-bit SQL Server 2016 RTM Enterprise 64-bit

1. Click the Download button on this page to start the download. 2. Do one of the following: - To start the installation immediately, click Run. - To save the download to your computer for installation at a later time, click Save. - To cancel the installation, click Cancel. To upgrade the SQL Server Connector to the latest version DLL Crypto provider, you must follow these steps. - Stop SQL Server service using SQL Server Configuration Manager - Uninstall the old version using Control Panel\Programs\Programs and Features - Install (upgrade) new SQL Server Connector for Microsoft Azure Key Vault - Start SQL Server service - Test encrypted DB(s) is/are accessible