az sql server tde-key

Manage a server's encryption protector.

Commands

az sql server tde-key set Sets the server's encryption protector.
az sql server tde-key show Gets a server encryption protector.

az sql server tde-key set

Sets the server's encryption protector.

az sql server tde-key set --server-key-type {AzureKeyVault, ServiceManaged}
[--ids]
[--kid]
[--resource-group]
[--server]
[--subscription]

Required Parameters

--server-key-type -t

The type of the server key.

accepted values: AzureKeyVault, ServiceManaged

Optional Parameters

--ids

One or more resource IDs (space-delimited). If provided, no other 'Resource Id' arguments should be specified.

--kid -k

The Azure Key Vault key identifier of the server key. An example key identifier is "https://YourVaultName.vault.azure.net/keys/YourKeyName/01234567890123456789012345678901".

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--server -s

Name of the Azure SQL server. You can configure the default using az configure --defaults sql-server=<name>.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

az sql server tde-key show

Gets a server encryption protector.

az sql server tde-key show [--ids]
[--resource-group]
[--server]
[--subscription]

Optional Parameters

--ids

One or more resource IDs (space-delimited). If provided, no other 'Resource Id' arguments should be specified.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--server -s

Name of the Azure SQL server. You can configure the default using az configure --defaults sql-server=<name>.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.