What’s New for the Engine?SecurityMicrosoft Entra and Managed IdentityBACKUP to URL with Managed IdentityManaged Identity Support for Azure Key VaultMicrosoft Entra Logins for Service PrincipalsSecurity CacheEncryption and Password EnhancementsTLS 1.3/TDS 8.0OAEP Padding Mode Support for RSA EncryptionPBKDF for Password HashesCustom Password Policy for SQL Server on LinuxPerformanceOptimized LockingHow It WorksPrerequisites for the ExampleExample Steps for Lock EscalationExample Steps for Lock After Qualification (LAQ)tempdb Resource GovernancePrerequisites for the ExampleExamples for tempdb Resource GovernanceOther tempdb EnhancementsADR in tempdbtmpfs Support for tempdb on LinuxQuery Optimization and ExecutionOptimized sp_execute_sqlCardinality Estimation (CE) Feedback for ExpressionsOptional Parameter Plan Optimization (OPPO)DOP FeedbackQuery ManagementColumnstore Index ImprovementsQuery Store on Secondary ReplicasPersisted Stats on Readable SecondariesAvailabilityAlways On Availability Groups (AGs)Failover ImprovementsTuning, Configuration, and DiagnosticsDAG EnhancementsBackup/RestoreZSTD Backup CompressionBackup on SecondariesBackup to Immutable Azure StorageHidden GemsABORT_QUERY_EXECUTIONPrerequisitesThe Bad QuerySo, bad query, “make my day”In-Memory OLTPPolyBasePolyBase Services May Not Be RequiredManaged Identity SupportDiagnosticsThe Fastest Database on the PlanetAlways Tuning the Engine