sql-server-samples/samples/features/security/always-encrypted-with-secure-enclaves/tsql-scripts/RotateKeys.sql

USE [Clinic]
GO

ALTER TABLE [dbo].[Patients]
ALTER COLUMN [SSN] [char](11) COLLATE Latin1_General_BIN2
ENCRYPTED WITH (COLUMN_ENCRYPTION_KEY = [CEK2], ENCRYPTION_TYPE = Randomized, ALGORITHM = 'AEAD_AES_256_CBC_HMAC_SHA_256') NOT NULL
WITH (ONLINE = ON)
GO

ALTER TABLE [dbo].[Patients]
ALTER COLUMN [LastName] [nvarchar](50) COLLATE Latin1_General_BIN2
ENCRYPTED WITH (COLUMN_ENCRYPTION_KEY = [CEK2], ENCRYPTION_TYPE = Randomized, ALGORITHM = 'AEAD_AES_256_CBC_HMAC_SHA_256') NOT NULL
WITH (ONLINE = ON)
GO

ALTER TABLE [dbo].[Patients]
ALTER COLUMN [BirthDate] [datetime2](7)
ENCRYPTED WITH (COLUMN_ENCRYPTION_KEY = [CEK2], ENCRYPTION_TYPE = Randomized, ALGORITHM = 'AEAD_AES_256_CBC_HMAC_SHA_256') NOT NULL
WITH (ONLINE = ON)
GO

DBCC FREEPROCCACHE
GO