Now available to the public, Azure SQL Database and Data Warehouse transparent data encryption offers Bring Your Own Key (BYOK) support with Azure Key Vault integration. Azure Key Vault provides highly available and scalable secure storage for RSA cryptographic keys backed by FIPS 140-2 Level 2 validated hardware security modules (HSMs). Key Vault streamlines the key management process and enables you to maintain full control of encryption keys, and allows you to manage and audit key access.
Learn more at the Azure blog.