📄️ Prerequisites
Before starting the process of integrating the Securosys CloudHSM or on-premises Primus HSM with Microsoft SQL Server - Always Encrypted please ensure the following is met on a client machine with MS SQL installed, hosting your client applications:
📄️ Primus CNG/KSP Provider
To install and configure the Primus CNG/KSP Provider, visit the Primus CNG/KSP Provider documentation.
📄️ Creating Column Master Key
Start the Microsoft SQL Server Management Studio (SSMS) and connect to the desired database to protect. Create a Column Master Key (CMK) using the Primus HSM or CloudHSM. This key will encrypt all subsequent Column Encryption Keys (CEK).
📄️ Creating Column Encryption Key
There are two approaches to generate the Column Encryption Key (CEK):
📄️ Enable Column Encryption on the Database Table
To enable Always Encrypted use either the Graphical User Interface or the Command Line Interface process, depending on your preference.