Key rotation is the process of refreshing your encryption keys. It’s generally seen as good practice to do this periodically or if you have a serious breach and think they could have been accessed or stolen by an unauthorized individual. When you’re planning an implementation of Always Encrypted, you should make sure you understand this process and how your organization is going to manage it over time.
In terms of Always Encrypted there are two potential flavors of key rotation, though one is much ...