SQL Server Security Blog

We have moved!

Thanks for visiting! This blog has now been migrated to:...

Author: Pam Lahoud Date: 03/29/2019

SQL Vulnerability Assessment now supports Azure SQL Data Warehouse and Azure SQL Database Managed Instance

SQL Vulnerability Assessment is now available for Azure SQL Data Warehouse and for Azure SQL...

Author: Ronit Reger Date: 09/25/2018

Always Encrypted with Secure Enclaves - Try It Now in SQL Server 2019 Preview!

Last year, we revealed our efforts to bring confidential computing capabilities of Always Encrypted...

Author: Jakub Szymaszek Date: 09/24/2018

SQL Audit logs in Azure Log Analytics and Azure Event Hubs

We are pleased to announce that Azure SQL Database Audit logs can now be written directly to Azure...

Author: Ronit Reger Date: 09/13/2018

Azure SQL Vulnerability Assessment - now with PowerShell support!

You can now manage your SQL Vulnerability Assessments at scale using the new SQL VA PowerShell...

Author: Ronit Reger Date: 08/02/2018

PowerShell cmdlets for managing SQL Vulnerability Assessments

We are pleased to announce the availability of PowerShell cmdlets for managing SQL Vulnerability...

Author: Ronit Reger Date: 07/05/2018

Introducing SQL Information Protection for Azure SQL Database and on-premises SQL Server!

We are delighted to announce the public preview of SQL Information Protection (Data Discovery &...

Author: Gilad Mittelman [MSFT] Date: 02/20/2018

Azure Log Analytics (OMS) Agent now collects SQL Server audit logs

We are happy to inform that the Azure Log Analytics (OMS) Agent is now capable of pushing SQL Server...

Author: Gilad Mittelman [MSFT] Date: 12/28/2017

SQL Vulnerability Assessment now available for SQL Server 2012 and up

SQL Vulnerability Assessment has been available for preview on Azure SQL Database for a couple of...

Author: Ronit Reger Date: 12/11/2017

Enabling Confidential Computing with Always Encrypted using Enclaves (Early Access Preview)

Last week at Ignite, we announced a major SQL security investment that enhances Always Encrypted...

Author: Jakub Szymaszek Date: 10/05/2017

Enabling communication traces in C# application for Azure AD authentication with SQL DB using token-based mechanism with Multi-factor authentication (MFA)

SQL server security team presents a code sample ( as VS project) allowing to enable communication...

Author: Mirek H Sztajno Date: 08/29/2017

Token-based authentication including Multi-factor auth (MFA) for Azure SQL DB using Azure Active Directory (AD)

SQL server security team presents an application solution for token-based authentication with...

Author: Mirek H Sztajno Date: 08/18/2017

Now Available: Guide for enhancing privacy and addressing GDPR requirements with the Microsoft SQL platform

Data privacy and data security have become one of the most prominent topics in organizations in...

Author: Ronit Reger Date: 05/24/2017

Threat Detection in Azure SQL Database is now Generally Available

We are excited to announce that Threat Detection is now Generally Available in Azure SQL Database....

Author: Ron Matchoro Date: 05/02/2017

Newly created Azure SQL databases will be encrypted at rest by default

Earlier today, we announced that all new Azure SQL databases will be encrypted with Transparent Data...

Author: Rebecca Zhang (MSFT) Date: 05/02/2017

Certificate-based authentication for Azure SQL DB using Azure Active Directory with recent Azure RM PowerShell version

This is a new version of the previous blog on Token-based authentication (see...

Author: Mirek H Sztajno Date: 04/25/2017

Blob Auditing in Azure SQL Database is Generally Available

We are excited to announce that SQL Blob Auditing is now Generally Available in Azure SQL Database....

Author: Gilad Mittelman [MSFT] Date: 02/23/2017

Getting Started with Always Encrypted using PowerShell

In the previous articles from the Always Encrypted blog series, we demonstrated how to configure...

Author: Jakub Szymaszek Date: 01/04/2017

Parameterization for Always Encrypted - Using SSMS to Insert into, Update and Filter by Encrypted Columns

SQL Server  Management Studio 17.o (the next major update of SSMS, currently available as a Release...

Author: Jakub Szymaszek Date: 12/13/2016

Azure samples for Azure AD .Net WebApi using Azure AD "on-behalf of token" to connect to SQL DB and SQL DW

The C# code samples attached in the zip file below present a solution for the front-mid tier...

Author: Mirek H Sztajno Date: 11/30/2016

Feature Spotlight: Transparent Data Encryption (TDE)

As more and more businesses go digital and towards the cloud, security is more important than ever....

Author: Rebecca Zhang (MSFT) Date: 10/05/2016

SQL Server Connector support for private Azure clouds

Starting today, the SQL Server Connector also supports private Azure clouds. If you're using a...

Author: Rebecca Zhang (MSFT) Date: 09/14/2016

SQL Threat Detection – Your built-in security expert

Azure SQL Database Threat Detection has been in preview for a few months now. We’ve on-boarded many...

Author: Ron Matchoro Date: 08/08/2016

Always Encrypted in Azure SQL Database is Generally Available

I'm happy to announce Always Encrypted in Azure SQL Database is now generally available! Always...

Author: Jakub Szymaszek Date: 07/11/2016

Developing Databases using Always Encrypted with SQL Server Data Tools

We are excited to announce that SQL Server Data Tools (SSDT) now supports developing databases using...

Author: Jakub Szymaszek Date: 07/05/2016

SQL Server Connector for Azure Key Vault is Generally Available

Starting today, the SQL Server Connector for Azure Key Vault is Generally Available! The SQL Server...

Author: Rebecca Zhang (MSFT) Date: 06/13/2016

SQL Server Connector Public Preview Update

A new update of the SQL Server Connector is available! The SQL Server Connector is currently in...

Author: Rebecca Zhang (MSFT) Date: 05/18/2016

Token-based authentication support for Azure SQL DB using Azure AD auth

SQL Server security team would like to announce token based authentication support for Azure SQL DB...

Author: Mirek H Sztajno Date: 02/09/2016

Best Practices for Moving Data Encrypted with Always Encrypted

With the introduction of Always Encrypted, Microsoft’s SQL platform (SQL Server 2016 and SQL...

Author: Nitish Upreti Date: 01/07/2016

Using SQL Server Integration Services (SSIS) with Always Encrypted

We would like share a couple of links to two articles, just published on SQL Server...

Author: Jakub Szymaszek Date: 12/18/2015

Row-Level Security block predicates are generally available on Azure SQL Database

Azure SQL Database’s Row-Level Security (RLS) feature now officially supports block...

Author: Tommy Mullaney Date: 12/01/2015

Using Hardware Security Modules with Always Encrypted

Using Hardware Security Modules with Always Encrypted In the examples from the previous articles on...

Author: Jakub Szymaszek Date: 11/16/2015

Using the Azure Key Vault Key Store Provider for Always Encrypted

During the SQL PASS Summit 2015, we released a custom key store provider that enables support for...

Author: Benjin Dubishar Date: 11/10/2015

Tutorial: Row-Level Security and Entity Framework

In response to a common customer question, we've published a short tutorial showing how to use...

Author: Tommy Mullaney Date: 11/04/2015

Public Preview of Always Encrypted in Azure SQL Database

Always Encrypted is now available for public preview in all service tiers of Azure SQL Database V12....

Author: Jakub Szymaszek Date: 11/03/2015

Azure Key Vault Integration for Azure SQL Server VMs

Last week, the SQL VM team announced the Azure Key Vault Integration feature. The Azure Key Vault...

Author: Jack Richins Date: 11/03/2015

SSMS Encryption Wizard - Enabling Always Encrypted in a Few Easy Steps

As we explained in the previous articles, Always Encrypted is a client-side encryption technology -...

Author: Jakub Szymaszek Date: 10/31/2015

Dynamic Data Masking is now generally available for Azure SQL Database

  We’re delighted to announce the general availability of Dynamic Data Masking for Azure SQL...

Author: Ronit Reger Date: 10/31/2015

Oil & Gas Security Demo with SQL Server 2016

At our security session today at PASS Summit 2015, we were extremely fortunate to be joined by Jamey...

Author: Tommy Mullaney Date: 10/29/2015

New Enhancements in Always Encrypted

The new version of SQL Server Management Studio (October 2015 Preview – build 13.0.700.242)...

Author: Jakub Szymaszek Date: 10/28/2015

Reminder to Update Your SQL Server Connector

If you are currently using the SQL Server Connector to interface with your Azure Key Vault, please...

Author: Jack Richins Date: 10/27/2015

Dynamic Data Masking–highlighting the latest improvements

Dynamic Data Masking on Azure SQL Database has been in preview for a few months now and is about to...

Author: Ronit Reger Date: 10/22/2015

Azure SQL Database Transparent Data Encryption General Availability

I'm pleased to announce the general availability of Azure SQL Database Transparent Data Encryption...

Author: Jack Richins Date: 10/14/2015

New Row-Level Security functionality: Block predicates (preview)

Block predicates are now available as a preview enhancement for Row-Level Security (RLS) on Azure...

Author: Tommy Mullaney Date: 10/02/2015

Examples of some connection errors for Azure Active Directory Authentication

Mirek SztajnoLast updated on 09/28/15Examples of some connection errors for Azure Active Directory...

Author: Mirek H Sztajno Date: 09/28/2015

Creating Custom Key Store Providers for Always Encrypted (Azure Key Vault Example)

Updates: The syntax for column master keys have been updated. Please refer to...

Author: Raul Garcia - MS Date: 09/25/2015

Transparent Database Encryption Preview Issues Resolved

Just a quick update to let you know all issues and limitations with TDE Preview for Azure SQL...

Author: Jack Richins Date: 09/24/2015

Azure Active Directory Authentication – troubleshooting potential connectivity issues

To troubleshoot potential connectivity issues for Azure AD authentication featureavailable for...

Author: Mirek H Sztajno Date: 09/16/2015

Azure Active Directory Authentication is in Public Preview

Azure SQL Database V12 now supports (in public preview) Azure AD authentication,a mechanism of...

Author: Mirek H Sztajno Date: 09/16/2015

Using Always Encrypted with Entity Framework 6

Entity Framework 6 was not designed from the start to work with the Always Encrypted feature of SQL...

Author: Maurycy Markowski - MSFT Date: 08/27/2015

Next>