Always Encrypted

[MiguelAtTweddle]

Is it possible to use mssql-cli with a database which has Always Encrypted feature on certain fields?

[pensivebrian]

Not at the moment. mssql-cli uses the .NET Core System.Data.SqlClient driver to connect to SQL Server, and this driver does not yet Always Encrypted columns.

If/when support is added to the Microsoft.Data.SqlClient driver for Always Encrypted, we'll make the move to this driver. Microsoft.Data.SqlClient support Always Encrypted is tracked by issue dotnet/SqlClient#11.

[KalleOlaviNiemitalo]

dotnet/SqlClient#11 has been closed, and it looks like you already moved to Microsoft.Data.SqlClient in microsoft/sqltoolsservice#865. Does mssql-cli now support Always Encrypted, then?

[pensivebrian]

Not yet, but we're close now that all dependencies support the feature. All I think we need todo is wire up the '-g (enable column encryption)' parameter to set a value in the connection string when connecting to SQL Server. I don't have a timeline, but I'm hoping we can address this soon.