Managed HSM Available in Azure Key Vault
Released to general availability in Azure SQL Database and Managed Instance is the ability to use an RSA key stored in Azure Key Vault Managed HSM, for customer-managed Transparent Data Encryption Bring Your Own Key (TDE BYOK).