Integrate Vault to MS Always Encrypted

[mfurrer]

Is it possible to use Vault as a custom key store provider in MS Always Encrypted?

Documentation lists “Key stores, such as hardware security module, that provide Cryptography Next Generation (CNG) API or Cryptography API (CAPI)” as supported options:

Create & store column master keys for Always Encrypted - SQL Server

Thanks!

[aram]

I don’t believe Vault has CAPI API.