Connect to SQL Server Always Encrypted columns with BizTalk Server

Enable Always Encrypted in the WCF-SQL adapter in BizTalk Server to query encrypted columns.

Starting with BizTalk Server 2016 Feature Pack 1, the WCF-SQL adapter can query encrypted columns in SQL Server. The ColumnEncryptionSetting binding property is used to enable or disable the functionality to get decrypted/encrypted column values from an Always Encrypted database.

This topic shows you how to enable or disable this feature in BizTalk Server.


Always Encrypted (Database Engine) is a great resource to understand and learn more about this SQL Server feature.


Install Feature Pack 2 on your BizTalk Server.

Enable Always Encrypted

  1. In the BizTalk Server Administration console, right-click your WCF-SQL port, and select Properties.
  2. Go to the Binding tab.
  3. Under Always Encrypted, enable or disable the ColumnEncryptionSettings property:
  • Enabled: The port queries, and gets encrypted data from an Always Encrypted database

  • Disabled: The port queries the Always Encrypted database, but the data returned is hashed

    Enable Always Encrypted

  1. Select Apply, and OK to save your changes.

See also

Always Encrypted (Database Engine)
Configure the Feature Pack