Forum Discussion
Azure Analysis Services, decrypt data from SQL Server
Yes this can be done. See this link for guidance. Although it refers to ssas it is the same process:
https://www.kasperonbi.com/use-always-encrypted-data-with-ssas-and-power-bi/
HTH,
Chris
- Fosse83Feb 03, 2021Copper Contributor
Chris-Schmidt-MSFT Thanks for the reply! I have had a look at that one, but I fail to get it working due to the fact that we have our key stored in Azure Key Vault. I am not sure that storing the key in key vault is supported by AS, but I cant find any official documentation on this. I am also not sure on how I can access Azure AS in order to store the certificate on the server.
- Chris-Schmidt-MSFTFeb 04, 2021Former Employee
Fosse83 For the certificate piece, try and install the certificate on the data gateway VM.
Regarding the key vault, I haven't tested it but try and grant the Analysis Services Service Principal that does your processing access to read from the key vault, like outlined in this document:
Grant permission to applications to access an Azure key vault using Azure RBAC | Microsoft Docs