Call base.OnModelCreating(modelBuilder) before modelBuilder.UseEncryption(_provider) to ensure entity configurations are applied first. This order is required for encryption to work correctly as mentioned in the example in the documentation