DROP COLUMN ENCRYPTION KEY (Transact-SQL)

Applies to: SQL Server 2016 (13.x) and later Azure SQL Database Azure SQL Managed Instance

Drops a column encryption key from a database.

Transact-SQL syntax conventions

DROP COLUMN ENCRYPTION KEY key_name [;]  

key_name
Is the name by which the column encryption key to be dropped from the database.

A column encryption key cannot be dropped if it is used to encrypt any column in the database. All columns using the column encryption key must first be dropped.

Requires ALTER ANY COLUMN ENCRYPTION KEY permission on the database.

The following example drops a column encryption key called MyCEK.

DROP COLUMN ENCRYPTION KEY MyCEK;  
GO  

CREATE COLUMN ENCRYPTION KEY (Transact-SQL)
ALTER COLUMN ENCRYPTION KEY (Transact-SQL)
CREATE COLUMN MASTER KEY (Transact-SQL)
Always Encrypted
Always Encrypted with secure enclaves
Overview of Key Management for Always Encrypted
Manage keys for Always Encrypted with secure enclaves