SQL TDE Question

Question

I went through the docs document to set up SQL Server TDE Extensible Key Management by using Azure Key Vault.

I have a question: how to rotate the key without destroying the SQL database? What's the script?

Note: I am using local SQL Server not Azure SQL Database.

Answer 1

Please avoid double posts: https://social.msdn.microsoft.com/Forums/sqlserver/en-US/9c3ac4fd-baa5-4142-826f-e33720fb096c/sql-tde-key-question?forum=sqlsecurity

---

Olaf Helper

[ Blog] [ Xing] [ MVP]

Answer 2

Hi Andury,

Same reply as this case: sql-tde-question

> I have a question: how to rotate the key without destroying the SQL database? What's the script?

Next is the process to rotate the keys and certificates used for TDE encryption:

1. Create a new SQL TDE certificate;

2. Backup the new SQL TDE certificate;

3. Create the same SQL TDE certificate;

4. Change encryption key for your databases;

More detail steps and codes you can reference: rotate-tde-keys&certificates

And this could be helpful: key-rotation-in-tde, SmartKey

BR,

Mia

If the reply helped, do "Accept Answer" and upvote it.--Mia.

---

""SQL Server related"" forum will be migrated to a new home on Microsoft Q&A SQL Server!
We invite you to post new questions in the "SQL Server related" forum’s new home on Microsoft Q&A SQL Server !
For more information, please refer to the sticky post.

Answer 3

Hi Andury,

Is the reply helpful?

BR,

Mia

If the reply helped, "Mark Answer" and upvote it.--Mia

---

""SQL Server related"" forum will be migrated to a new home on Microsoft Q&A SQL Server!
We invite you to post new questions in the "SQL Server related" forum’s new home on Microsoft Q&A SQL Server !
For more information, please refer to the sticky post.

Answer 4

Hi Andury,

Please reference the reply from this case: tde-regenerate-key

BR,

Mia

If the reply helped, please "Mark Answer" and upvote it.--Mia

---

""SQL Server related"" forum will be migrated to a new home on Microsoft Q&A SQL Server!
We invite you to post new questions in the "SQL Server related" forum’s new home on Microsoft Q&A SQL Server !
For more information, please refer to the sticky post.