You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Common [!INCLUDE[ssNoVersion](../../../includes/ssnoversion-md.md)] encryption activities using an asymmetric key protected by the Azure Key Vault include the following three areas.
20
19
21
20
- Transparent Data Encryption by using an Asymmetric Key from Azure Key Vault
@@ -42,8 +41,8 @@ You will need to create a credential and a login, and create a database encrypti
42
41
Modify the [!INCLUDE[tsql](../../../includes/tsql-md.md)] script below in the following ways:
43
42
44
43
- Edit the `IDENTITY` argument (`ContosoDevKeyVault`) to point to your Azure Key Vault.
45
-
- If you're using **public Azure**, replace the `IDENTITY` argument with the name of your Azure Key Vault from Part II.
46
-
- If you're using a **private Azure cloud** (ex. Azure Government, Azure China, or Azure Germany), replace the `IDENTITY` argument with the Vault URI that is returned in Part II, step 3. Do not include "https://" in the Vault URI.
44
+
- If you're using **global Azure**, replace the `IDENTITY` argument with the name of your Azure Key Vault from Part II.
45
+
- If you're using a **private Azure cloud** (ex. Azure Government, Azure China 21Vianet, or Azure Germany), replace the `IDENTITY` argument with the Vault URI that is returned in Part II, step 3. Do not include "https://" in the Vault URI.
47
46
48
47
- Replace the first part of the `SECRET` argument with the Azure Active Directory **Client ID** from Part I. In this example, the **Client ID** is `EF5C8E094D2A4A769998D93440D8115D`.
49
48
@@ -55,9 +54,9 @@ You will need to create a credential and a login, and create a database encrypti
55
54
```sql
56
55
USE master;
57
56
CREATE CREDENTIAL Azure_EKM_TDE_cred
58
-
WITH IDENTITY ='ContosoDevKeyVault', -- for public Azure
57
+
WITH IDENTITY ='ContosoDevKeyVault', -- for global Azure
59
58
-- WITH IDENTITY = 'ContosoDevKeyVault.vault.usgovcloudapi.net', -- for Azure Government
60
-
-- WITH IDENTITY = 'ContosoDevKeyVault.vault.azure.cn', -- for Azure China
59
+
-- WITH IDENTITY = 'ContosoDevKeyVault.vault.azure.cn', -- for Azure China 21Vianet
61
60
-- WITH IDENTITY = 'ContosoDevKeyVault.vault.microsoftazure.de', -- for Azure Germany
FOR CRYPTOGRAPHIC PROVIDER AzureKeyVault_EKM_Prov;
@@ -139,8 +138,8 @@ The [!INCLUDE[ssDE](../../../includes/ssde-md.md)] needs the credential when acc
139
138
Modify the [!INCLUDE[tsql](../../../includes/tsql-md.md)] script below in the following ways:
140
139
141
140
- Edit the `IDENTITY` argument (`ContosoDevKeyVault`) to point to your Azure Key Vault.
142
-
- If you're using **public Azure**, replace the `IDENTITY` argument with the name of your Azure Key Vault from Part II.
143
-
- If you're using a **private Azure cloud** (ex. Azure Government, Azure China, or Azure Germany), replace the `IDENTITY` argument with the Vault URI that is returned in Part II, step 3. Do not include "https://"in the Vault URI.
141
+
- If you're using **global Azure**, replace the `IDENTITY` argument with the name of your Azure Key Vault from Part II.
142
+
- If you're using a **private Azure cloud** (ex. Azure Government, Azure China 21Vianet, or Azure Germany), replace the `IDENTITY` argument with the Vault URI that is returned in Part II, step 3. Do not include "https://"in the Vault URI.
144
143
145
144
- Replace the first part of the `SECRET` argument with the Azure Active Directory **Client ID**from Part I. In this example, the **Client ID** is `EF5C8E094D2A4A769998D93440D8115D`.
146
145
@@ -153,9 +152,9 @@ The [!INCLUDE[ssDE](../../../includes/ssde-md.md)] needs the credential when acc
153
152
USE master;
154
153
155
154
CREATE CREDENTIAL Azure_EKM_Backup_cred
156
-
WITH IDENTITY = 'ContosoDevKeyVault', -- for public Azure
155
+
WITH IDENTITY = 'ContosoDevKeyVault', -- for global Azure
157
156
-- WITH IDENTITY = 'ContosoDevKeyVault.vault.usgovcloudapi.net', -- for Azure Government
158
-
-- WITH IDENTITY = 'ContosoDevKeyVault.vault.azure.cn', -- for Azure China
157
+
-- WITH IDENTITY = 'ContosoDevKeyVault.vault.azure.cn', -- for Azure China 21Vianet
159
158
-- WITH IDENTITY = 'ContosoDevKeyVault.vault.microsoftazure.de', -- for Azure Germany
0 commit comments