Backup and restore databases using Always Encrypted

Applies to: SQL Server Azure SQL Database Azure SQL Managed Instance

This article describes how to back up and restore a database containing columns protected with Always Encrypted.

When you back up a database, the resulting backup file contains encrypted stored in encrypted columns and all metadata for Always Encrypted keys.

When you restore a database, all encrypted data and all metadata for Always Encrypted keys are restored.

If you restored the database on a different server or under a different name, you don't need to do anything special to enable the application to query the encrypted data in the target database, as the keys in both databases are the same.

For detailed information about how to back up and restore a database, see:

• Backup Overview (SQL Server)
• Restore a database to Azure SQL Managed Instance with SSMS

Next steps

• Query columns using Always Encrypted with SQL Server Management Studio
• Develop applications using Always Encrypted with secure enclaves

See also

• Always Encrypted
• Export and import databases using Always Encrypted
• Migrate data to or from columns using Always Encrypted with SQL Server Import and Export Wizard
• Bulk load encrypted data to columns using Always Encrypted