Merge pull request #33640 from MicrosoftDocs/main

Albertyang0 · web-flow · commit 253bdacb1f0a · 2025-03-28T10:35:25.000-07:00
3/28/2025 AM Publish
diff --git a/azure-sql/database/transparent-data-encryption-byok-overview.md b/azure-sql/database/transparent-data-encryption-byok-overview.md
@@ -27,7 +27,6 @@ Managing the TDE protector at the database level in Azure SQL Database is availa
 
 > [!NOTE]  
 > - This article applies to Azure SQL Database, Azure SQL Managed Instance, and Azure Synapse Analytics (dedicated SQL pools (formerly SQL DW)). For documentation on transparent data encryption for dedicated SQL pools inside Synapse workspaces, see [Azure Synapse Analytics encryption](/azure/synapse-analytics/security/workspaces-encryption).
-> - <a id="doubleencryption"></a> To provide Azure SQL customers with two layers of encryption of data at rest, infrastructure encryption (using AES-256 encryption algorithm) with platform managed keys is being rolled out. This provides an addition layer of encryption at rest along with TDE with customer-managed keys, which is already available. For Azure SQL Database and Azure SQL Managed Instance, all databases, including the `master` database and other system databases, will be encrypted when infrastructure encryption is turned on. At this time, customers must request access to this capability. If you're interested in this capability, contact AzureSQLDoubleEncryptionAtRest@service.microsoft.com.
 
 [!INCLUDE [entra-id](../includes/entra-id.md)]
 
diff --git a/docs/connect/odbc/download-odbc-driver-for-sql-server.md b/docs/connect/odbc/download-odbc-driver-for-sql-server.md
@@ -37,7 +37,7 @@ Version 18.5.1.1 is the latest general availability (GA) version. If you have a
 - Released: March 17, 2025
 
 > [!NOTE]
-> If you are accessing this page from a non-English language version, and want to see the most up-to-date content, please select **Read in English** at the top of this page. You can download different languages from the US-English version site by selecting [available languages](#available-languages).
+> If you're accessing this page from a non-English language version, and want to see the most up-to-date content, select **Read in English** at the top of this page. You can download different languages from the US-English version site by selecting [available languages](#available-languages).
 
 ## Available languages
 
@@ -140,6 +140,7 @@ If you need to download the packages for offline installation, all versions are
 - [SUSE 11 .rpm packages](https://packages.microsoft.com/sles/11/prod/)
 
 ### Ubuntu
+- Ubuntu 24.10 .deb packages: [v18](https://packages.microsoft.com/ubuntu/24.10/prod/pool/main/m/msodbcsql18/)
 - Ubuntu 24.04 .deb packages: [v18](https://packages.microsoft.com/ubuntu/24.04/prod/pool/main/m/msodbcsql18/)
 - Ubuntu 22.04 .deb packages: [v17](https://packages.microsoft.com/ubuntu/22.04/prod/pool/main/m/msodbcsql17/) [v18](https://packages.microsoft.com/ubuntu/22.04/prod/pool/main/m/msodbcsql18/)
 [v18](https://packages.microsoft.com/ubuntu/21.10/prod/pool/main/m/msodbcsql18/)
diff --git a/docs/docfx.json b/docs/docfx.json
@@ -106,9 +106,6 @@
         "master-data-services/**/*.md": "SQL Server Master Data Services",
         "master-data-services/microsoft-excel-add-in/**/*.md": "SQL Server MDS Excel Add-in",
         "ssdt/**/*.md": "SQL Server Data Tools (SSDT)",
-        "ssms/**/*.md": "SQL Server Management Studio (SSMS)",
-        "ssms/agent/**/*.md": "SQL Server Agent",
-        "ssms/visual-db-tools/**/*.md": "Visual Database Tools",
         "tools/ssbdiagnose/**/*.md": "ssbdiagnose",
         "data-quality-services/**/*.md": "Data Quality Services (DQS)",
         "azdata/**/*.md": "Azure Data CLI (azdata)",
@@ -185,7 +182,6 @@
         "sql-server/**/*.md": ">= sql-server-2016",
         "ssdt/**/*.md": ">= sql-server-2016 || >= sql-server-linux-2017 || = azuresqldb-current || = azuresqldb-mi-current || = azure-sqldw-latest || >= aps-pdw-2016 || = fabric",
         "ssma/**/*.md": ">= sql-server-2016 || >= sql-server-linux-2017 || = azuresqldb-current || = azuresqldb-mi-current || = azure-sqldw-latest || >= aps-pdw-2016",
-        "ssms/**/*.md": ">= aps-pdw-2016 || = azure-sqldw-latest || = azuresqldb-current || = azuresqldb-mi-current || >= sql-server-2016 || = fabric",
         "toc/**/*.md": "=azuresqldb-current||=azuresqldb-mi-current||=azure-sqldw-latest||>=aps-pdw-2016||>=sql-server-2016||>=sql-server-linux-2017 || = fabric",
         "tools/**/*.md": ">=aps-pdw-2016 || >=sql-server-2016 || >=sql-server-linux-2017 || =azure-sqldw-latest || =azuresql || =azuresql-db || =azuresqldb-mi-current || =azuresqldb-current || =fabric",
         "tools/distributed-replay/*.md": "= sql-server-2016 || = sql-server-2017 || = sql-server-ver15 || = sql-server-linux-2017 || = sql-server-linux-ver15",
@@ -440,7 +436,6 @@
           "connect/jdbc/download-microsoft-jdbc-driver-for-sql-server.md",
           "connect/oledb/download-oledb-driver-for-sql-server.md",
           "connect/odbc/download-odbc-driver-for-sql-server.md",
-          "ssms/download-sql-server-management-studio-ssms.md"
         ]
       },
       "sensitive-language-ma": {
@@ -461,7 +456,6 @@
           "relational-databases/system-tables/dbo-systargetservers-transact-sql.md",
           "database-engine/install-windows/upgrade-sql-server-using-the-installation-wizard-setup.md",
           "sql-server/failover-clusters/install/rename-a-sql-server-failover-cluster-instance.md",
-          "ssms/agent/**/*.md",
           "database-engine/install-windows/**/*.md"
         ]
       },
diff --git a/docs/relational-databases/security/encryption/always-encrypted-enclaves-provision-keys.md b/docs/relational-databases/security/encryption/always-encrypted-enclaves-provision-keys.md
@@ -89,7 +89,7 @@ Import-Module "SqlServer" -MinimumVersion 22.0.50
 $serverName = "<server name>"
 $databaseName = "<database name>"
 # Change the authentication method in the connection string, if needed.
-$connStr = "Server = " + $serverName + "; Database = " + $databaseName + "; Integrated Security = True"
+$connStr = "Server = " + $serverName + "; Database = " + $databaseName + "; Integrated Security = True; TrustServerCertificate = True"
 $database = Get-SqlDatabase -ConnectionString $connStr
 
 # Create a SqlColumnMasterKeySettings object for your column master key
@@ -132,7 +132,7 @@ $akvKey = Add-AzKeyVaultKey -VaultName $akvName -Name $akvKeyName -Destination "
 $serverName = "<server name>"
 $databaseName = "<database name>"
 # Change the authentication method in the connection string, if needed.
-$connStr = "Server = " + $serverName + "; Database = " + $databaseName + "; Integrated Security = True"
+$connStr = "Server = " + $serverName + "; Database = " + $databaseName + "; Integrated Security = True; TrustServerCertificate = True"
 $database = Get-SqlDatabase -ConnectionString $connStr
 
 # Obtain an access token for key vaults.
diff --git a/docs/relational-databases/security/encryption/always-encrypted-enclaves.md b/docs/relational-databases/security/encryption/always-encrypted-enclaves.md
@@ -217,9 +217,7 @@ The following limitations are specific to Always Encrypted with secure enclaves:
 - Queries with the LIKE operator or a comparison operator that has a query parameter using one of the following data types (that become large objects after encryption) ignore indexes and perform table scans.
   - `nchar[n]` and `nvarchar[n]`, if n is greater than 3967.
   - `char[n]`, `varchar[n]`, `binary[n]`, `varbinary[n]`, if n is greater than 7935.
-- Tooling limitations:
-  - The only supported key stores for storing enclave-enabled column `master` keys are Windows Certificate Store and Azure Key Vault.
-  - To trigger an in-place cryptographic operation via `ALTER TABLE`/`ALTER COLUMN`, you need to issue the statement using a query window in SSMS or Azure Data Studio, or you can write your own program that issues the statement. Currently, the `Set-SqlColumnEncryption` cmdlet in the SqlServer PowerShell module and the Always Encrypted wizard in SQL Server Management Studio don't support in-place encryption. Move the data out of the database for cryptographic operations, even if the column encryption keys used for the operations are enclave-enabled.
+- The only supported key stores for storing enclave-enabled column `master` keys are Windows Certificate Store and Azure Key Vault.
 - When you restore a VBS enclave-enabled database, it's essential to reconfigure the VBS enclave setting again.
 
 ## Related content
diff --git a/docs/relational-databases/security/encryption/configure-always-encrypted-keys-using-powershell.md b/docs/relational-databases/security/encryption/configure-always-encrypted-keys-using-powershell.md
@@ -56,7 +56,7 @@ Import-Module "SqlServer"
 $serverName = "<server name>"
 $databaseName = "<database name>"
 # Change the authentication method in the connection string, if needed.
-$connStr = "Server = " + $serverName + "; Database = " + $databaseName + "; Integrated Security = True"
+$connStr = "Server = " + $serverName + "; Database = " + $databaseName + "; Integrated Security = True; TrustServerCertificate = True"
 $database = Get-SqlDatabase -ConnectionString $connStr
 
 # Create a SqlColumnMasterKeySettings object for your column master key. 
@@ -98,7 +98,7 @@ Import-Module "SqlServer"
 $serverName = "<Azure SQL server name>.database.windows.net"
 $databaseName = "<database name>"
 # Change the authentication method in the connection string, if needed.
-$connStr = "Server = " + $serverName + "; Database = " + $databaseName + "; Authentication = Active Directory Integrated"
+$connStr = "Server = " + $serverName + "; Database = " + $databaseName + "; Authentication = Active Directory Integrated; TrustServerCertificate = True"
 $database = Get-SqlDatabase -ConnectionString $connStr
 
 # Create a SqlColumnMasterKeySettings object for your column master key. 
@@ -145,7 +145,7 @@ Import-Module "SqlServer"
 $serverName = "<server name>"
 $databaseName = "<database name>"
 # Change the authentication method in the connection string, if needed.
-$connStr = "Server = " + $serverName + "; Database = " + $databaseName + "; Integrated Security = True"
+$connStr = "Server = " + $serverName + "; Database = " + $databaseName + "; Integrated Security = True; TrustServerCertificate = True"
 $database = Get-SqlDatabase -ConnectionString $connStr
 
 # Create a SqlColumnMasterKeySettings object for your column master key. 
@@ -242,7 +242,7 @@ Import-Module "SqlServer"
 # Connect to your database.
 $serverName = "<server name>"
 $databaseName = "<database name>"
-$connStr = "Server = " + $serverName + "; Database = " + $databaseName + "; Integrated Security = True"
+$connStr = "Server = " + $serverName + "; Database = " + $databaseName + "; Integrated Security = True; TrustServerCertificate = True"
 $database = Get-SqlDatabase -ConnectionString $connStr
 
 # Create a SqlColumnMasterKeySettings object for your column master key. 
diff --git a/docs/t-sql/statements/set-transaction-isolation-level-transact-sql.md b/docs/t-sql/statements/set-transaction-isolation-level-transact-sql.md
