So far, we’ve just looked at the situation where you implement Always Encrypted for a new database. In many cases, however, you’re likely to be wanting to implement Always Encrypted for existing applications. Key to that will be being able to encrypt existing data.
As we’ve seen, one of the fundamentals of Always Encrypted is that SQL Server itself never has access to the unencrypted values of your data, and it doesn’t have access to the unencrypted Column Encryption Key. As such it’s not ...