managedHsmKeyId

To use customer managed keys from a managed HSM, provide the Managed HSM Key ID. To use service managed keys, omit this field.

Note: In order to use customer managed keys, the identity of the MSSQL server must have the following permissions on the key vault: 'get', 'wrapKey' and 'unwrapKey' Note: If server_id denotes a secondary server deployed for disaster recovery purposes, then the key_vault_key_id should be the same key used for the primary server's transparent data encryption. Both primary and secondary servers should be encrypted with same key material.