For the Hyperscale service tier in Azure SQL Database, TDE with bring your own key (BYOK) support is now available in preview. TDE with BYOK gives customers full and granular control over usage and management of the database encryption key (also known as TDE protector) and enables central management of keys in Azure Key Vault.