Generally Available: Versionless key support for transparent data encryption in Azure SQL Database

Azure SQL Database now supports versionless keys for transparent data encryption (TDE), giving you a simpler and more reliable way to manage your own encryption keys. You no longer need to reference a specific key version from Azure Key Vault or Managed HSM when configuring TDE with customer-managed keys. Instead, you point to a versionless key URI, and Azure SQL automatically starts using the latest version.

Versionless keys help you reduce operational overhead and the risk of misconfiguration. You keep full control over your keys and rotation policies, while making encryption at rest easier to operate at scale.

Learn more.