1 - Register ResearchApp1 to Azure AD. 2 - Create an Azure Key Vault instance and configure an access policy. 3 - Run the Always Encrypted wizard. Reference: https://docs.microsoft.com/en-us/azure/azure-sql/database/always-encrypted-azure-key-vault-configure?tabs=azure-powershell