Thank you for reaching out regarding the SSIS integration issue with Always Encrypted databases and Host Guardian Services.
You're absolutely right that Microsoft.SqlClient.Data is currently the only supported driver for retrieving encrypted data in SSIS when Host Guardian Services are enabled. It's encouraging that your ADO.NET Source component successfully connects and previews encrypted data during design time.
However, the error message:
"Could not create a managed connection manager."
is a known issue that typically occurs at runtime, not design time. This discrepancy is often due to how SSIS runtime handles connection managers differently than the design environment.
To solve the issue please follow the below steps :
1. Ensure SSIS Runtime Compatibility:
a. Confirm that the SSIS runtime environment (e.g., SQL Server Integration Services runtime or SSIS catalog) supports the Microsoft.SqlClient.Data provider.
b. Some SSIS runtimes may default to older providers like System.Data.SqlClient, which are incompatible with always Encrypted and Host Guardian Services. 2. Run Package Outside Visual Studio: Try executing the package via DTExec or SQL Agent Job to isolate whether the issue is specific to Visual Studio’s runtime. 3. Check for Missing Dependencies: Ensure that all required assemblies for Microsoft.SqlClient.Data are available in the runtime environment. Missing DLLs can cause this error. 4. For Always Encrypted columns, avoid using OLE DB destinations. Stick with ADO.NET destinations and ensure encryption settings are correctly configured.Microsoft is aware of these gaps and improvements are expected in future releases.