SQL Server Security Blog
We have moved!
Thanks for visiting! This blog has now been migrated to:...
Date: 03/29/2019
SQL Vulnerability Assessment now supports Azure SQL Data Warehouse and Azure SQL Database Managed Instance
SQL Vulnerability Assessment is now available for Azure SQL Data Warehouse and for Azure SQL...
Date: 09/25/2018
Always Encrypted with Secure Enclaves - Try It Now in SQL Server 2019 Preview!
Last year, we revealed our efforts to bring confidential computing capabilities of Always Encrypted...
Date: 09/24/2018
SQL Audit logs in Azure Log Analytics and Azure Event Hubs
We are pleased to announce that Azure SQL Database Audit logs can now be written directly to Azure...
Date: 09/13/2018
Azure SQL Vulnerability Assessment - now with PowerShell support!
You can now manage your SQL Vulnerability Assessments at scale using the new SQL VA PowerShell...
Date: 08/02/2018
PowerShell cmdlets for managing SQL Vulnerability Assessments
We are pleased to announce the availability of PowerShell cmdlets for managing SQL Vulnerability...
Date: 07/05/2018
Introducing SQL Information Protection for Azure SQL Database and on-premises SQL Server!
We are delighted to announce the public preview of SQL Information Protection (Data Discovery &...
Date: 02/20/2018
Azure Log Analytics (OMS) Agent now collects SQL Server audit logs
We are happy to inform that the Azure Log Analytics (OMS) Agent is now capable of pushing SQL Server...
Date: 12/28/2017
SQL Vulnerability Assessment now available for SQL Server 2012 and up
SQL Vulnerability Assessment has been available for preview on Azure SQL Database for a couple of...
Date: 12/11/2017
Enabling Confidential Computing with Always Encrypted using Enclaves (Early Access Preview)
Last week at Ignite, we announced a major SQL security investment that enhances Always Encrypted...
Date: 10/05/2017
Enabling communication traces in C# application for Azure AD authentication with SQL DB using token-based mechanism with Multi-factor authentication (MFA)
SQL server security team presents a code sample ( as VS project) allowing to enable communication...
Date: 08/29/2017
Token-based authentication including Multi-factor auth (MFA) for Azure SQL DB using Azure Active Directory (AD)
SQL server security team presents an application solution for token-based authentication with...
Date: 08/18/2017
Now Available: Guide for enhancing privacy and addressing GDPR requirements with the Microsoft SQL platform
Data privacy and data security have become one of the most prominent topics in organizations in...
Date: 05/24/2017
Threat Detection in Azure SQL Database is now Generally Available
We are excited to announce that Threat Detection is now Generally Available in Azure SQL Database....
Date: 05/02/2017
Newly created Azure SQL databases will be encrypted at rest by default
Earlier today, we announced that all new Azure SQL databases will be encrypted with Transparent Data...
Date: 05/02/2017
Certificate-based authentication for Azure SQL DB using Azure Active Directory with recent Azure RM PowerShell version
This is a new version of the previous blog on Token-based authentication (see...
Date: 04/25/2017
Blob Auditing in Azure SQL Database is Generally Available
We are excited to announce that SQL Blob Auditing is now Generally Available in Azure SQL Database....
Date: 02/23/2017
Getting Started with Always Encrypted using PowerShell
In the previous articles from the Always Encrypted blog series, we demonstrated how to configure...
Date: 01/04/2017
Parameterization for Always Encrypted - Using SSMS to Insert into, Update and Filter by Encrypted Columns
SQL Server Management Studio 17.o (the next major update of SSMS, currently available as a Release...
Date: 12/13/2016
Azure samples for Azure AD .Net WebApi using Azure AD "on-behalf of token" to connect to SQL DB and SQL DW
The C# code samples attached in the zip file below present a solution for the front-mid tier...
Date: 11/30/2016
Feature Spotlight: Transparent Data Encryption (TDE)
As more and more businesses go digital and towards the cloud, security is more important than ever....
Date: 10/05/2016
SQL Server Connector support for private Azure clouds
Starting today, the SQL Server Connector also supports private Azure clouds. If you're using a...
Date: 09/14/2016
SQL Threat Detection – Your built-in security expert
Azure SQL Database Threat Detection has been in preview for a few months now. We’ve on-boarded many...
Date: 08/08/2016
Always Encrypted in Azure SQL Database is Generally Available
I'm happy to announce Always Encrypted in Azure SQL Database is now generally available! Always...
Date: 07/11/2016
Developing Databases using Always Encrypted with SQL Server Data Tools
We are excited to announce that SQL Server Data Tools (SSDT) now supports developing databases using...
Date: 07/05/2016
SQL Server Connector for Azure Key Vault is Generally Available
Starting today, the SQL Server Connector for Azure Key Vault is Generally Available! The SQL Server...
Date: 06/13/2016
SQL Server Connector Public Preview Update
A new update of the SQL Server Connector is available! The SQL Server Connector is currently in...
Date: 05/18/2016
Token-based authentication support for Azure SQL DB using Azure AD auth
SQL Server security team would like to announce token based authentication support for Azure SQL DB...
Date: 02/09/2016
Best Practices for Moving Data Encrypted with Always Encrypted
With the introduction of Always Encrypted, Microsoft’s SQL platform (SQL Server 2016 and SQL...
Date: 01/07/2016
Using SQL Server Integration Services (SSIS) with Always Encrypted
We would like share a couple of links to two articles, just published on SQL Server...
Date: 12/18/2015
Row-Level Security block predicates are generally available on Azure SQL Database
Azure SQL Database’s Row-Level Security (RLS) feature now officially supports block...
Date: 12/01/2015
Using Hardware Security Modules with Always Encrypted
Using Hardware Security Modules with Always Encrypted In the examples from the previous articles on...
Date: 11/16/2015
Using the Azure Key Vault Key Store Provider for Always Encrypted
During the SQL PASS Summit 2015, we released a custom key store provider that enables support for...
Date: 11/10/2015
Tutorial: Row-Level Security and Entity Framework
In response to a common customer question, we've published a short tutorial showing how to use...
Date: 11/04/2015
Public Preview of Always Encrypted in Azure SQL Database
Always Encrypted is now available for public preview in all service tiers of Azure SQL Database V12....
Date: 11/03/2015
Azure Key Vault Integration for Azure SQL Server VMs
Last week, the SQL VM team announced the Azure Key Vault Integration feature. The Azure Key Vault...
Date: 11/03/2015
SSMS Encryption Wizard - Enabling Always Encrypted in a Few Easy Steps
As we explained in the previous articles, Always Encrypted is a client-side encryption technology -...
Date: 10/31/2015
Dynamic Data Masking is now generally available for Azure SQL Database
We’re delighted to announce the general availability of Dynamic Data Masking for Azure SQL...
Date: 10/31/2015
Oil & Gas Security Demo with SQL Server 2016
At our security session today at PASS Summit 2015, we were extremely fortunate to be joined by Jamey...
Date: 10/29/2015
New Enhancements in Always Encrypted
The new version of SQL Server Management Studio (October 2015 Preview – build 13.0.700.242)...
Date: 10/28/2015
Reminder to Update Your SQL Server Connector
If you are currently using the SQL Server Connector to interface with your Azure Key Vault, please...
Date: 10/27/2015
Dynamic Data Masking–highlighting the latest improvements
Dynamic Data Masking on Azure SQL Database has been in preview for a few months now and is about to...
Date: 10/22/2015
Azure SQL Database Transparent Data Encryption General Availability
I'm pleased to announce the general availability of Azure SQL Database Transparent Data Encryption...
Date: 10/14/2015
New Row-Level Security functionality: Block predicates (preview)
Block predicates are now available as a preview enhancement for Row-Level Security (RLS) on Azure...
Date: 10/02/2015
Examples of some connection errors for Azure Active Directory Authentication
Mirek SztajnoLast updated on 09/28/15Examples of some connection errors for Azure Active Directory...
Date: 09/28/2015
Creating Custom Key Store Providers for Always Encrypted (Azure Key Vault Example)
Updates: The syntax for column master keys have been updated. Please refer to...
Date: 09/25/2015
Transparent Database Encryption Preview Issues Resolved
Just a quick update to let you know all issues and limitations with TDE Preview for Azure SQL...
Date: 09/24/2015
Azure Active Directory Authentication – troubleshooting potential connectivity issues
To troubleshoot potential connectivity issues for Azure AD authentication featureavailable for...
Date: 09/16/2015
Azure Active Directory Authentication is in Public Preview
Azure SQL Database V12 now supports (in public preview) Azure AD authentication,a mechanism of...
Date: 09/16/2015
Using Always Encrypted with Entity Framework 6
Entity Framework 6 was not designed from the start to work with the Always Encrypted feature of SQL...
Date: 08/27/2015