Attribute

AEKeystoreClientSecret (AEKSCS)

Purpose

Specifies the Client Secret used to authenticate against the Azure Key Vault. This option is used only when Always Encrypted is enabled (ColumnEncryption=Enabled | ResultsetOnly) and Azure Key Vault is the keystore provider. The Azure Key Vault stores the column master key used for Always Encrypted functionality. To access the column master key from the Azure Key Vault, the Client Secret and principal ID must be provided.

Valid Values

client_secret

where:

client_secret
is the client Secret used to authenticate against the Azure Key Vault.

Notes

  • To specify the principal ID, use the Key Store Principal Id (AEKeystorePrincipalId) connection option.
  • This option is used only when the Azure Key Vault is specified as the keystore provider in the encryption metadata for result set columns or in statement parameters.
  • The driver determines which keystore provider to use based on the encryption metadata received from the server.

Default

None

GUI Tab

Security tab

See Also