Asked by:
SQL TDE Question

Question
-
I went through the docs document to set up SQL Server TDE Extensible Key Management by using Azure Key Vault.
I have a question: how to rotate the key without destroying the SQL database? What's the script?
Note: I am using local SQL Server not Azure SQL Database.
Monday, August 10, 2020 8:33 AM
All replies
-
Please avoid double posts: https://social.msdn.microsoft.com/Forums/sqlserver/en-US/9c3ac4fd-baa5-4142-826f-e33720fb096c/sql-tde-key-question?forum=sqlsecurity
Olaf Helper
[ Blog] [ Xing] [ MVP]Monday, August 10, 2020 9:08 AM -
Hi Andury,
Same reply as this case: sql-tde-question
> I have a question: how to rotate the key without destroying the SQL database? What's the script?
Next is the process to rotate the keys and certificates used for TDE encryption:
1. Create a new SQL TDE certificate;
2. Backup the new SQL TDE certificate;
3. Create the same SQL TDE certificate;
4. Change encryption key for your databases;
More detail steps and codes you can reference: rotate-tde-keys&certificatesAnd this could be helpful: key-rotation-in-tde, SmartKey
BR,
Mia
If the reply helped, do "Accept Answer" and upvote it.--Mia.
""SQL Server related"" forum will be migrated to a new home on Microsoft Q&A SQL Server!
We invite you to post new questions in the "SQL Server related" forum’s new home on Microsoft Q&A SQL Server !
For more information, please refer to the sticky post.Tuesday, August 11, 2020 2:16 AM -
Hi Andury,
Is the reply helpful?
BR,
Mia
If the reply helped, "Mark Answer" and upvote it.--Mia
""SQL Server related"" forum will be migrated to a new home on Microsoft Q&A SQL Server!
We invite you to post new questions in the "SQL Server related" forum’s new home on Microsoft Q&A SQL Server !
For more information, please refer to the sticky post.Thursday, August 13, 2020 1:11 AM -
Hi Andury,
Please reference the reply from this case: tde-regenerate-key
BR,
Mia
If the reply helped, please "Mark Answer" and upvote it.--Mia
""SQL Server related"" forum will be migrated to a new home on Microsoft Q&A SQL Server!
We invite you to post new questions in the "SQL Server related" forum’s new home on Microsoft Q&A SQL Server !
For more information, please refer to the sticky post.Thursday, August 13, 2020 3:27 AM