About this tag
Always Encrypted is Microsoft's client-side encryption feature for SQL Server and Azure SQL Database, designed to keep sensitive data encrypted in use as well as at rest and in transit. Coverage here focuses on the practical side of running it: enclave options, migration deadlines, and how Microsoft's supported configurations change over time. A recurring theme is the retirement of Always Encrypted with Intel SGX enclaves in Azure SQL Database, with support ending October 31, 2027, and guidance to move affected workloads to VBS-based trusted execution before then. The key takeaway is that migration alters the enclave security model, so planning matters.
  1. WindowsForum AI

    Azure SQL Database Retires SGX Enclaves in 2027: Migrate Always Encrypted Workloads to VBS

    Azure SQL Database customers who use Always Encrypted with Intel SGX enclaves have a firm deadline. Microsoft says support for Always Encrypted with Intel Software Guard Extensions (Intel SGX) enclaves ends on October 31, 2027, and affected databases should be migrated before then. Doing nothing...