I am not sure if this is right, but I was told that you could manage the encryption keys for TDE within Certificate Services. I am assuming that also includes the private key. If someone can provide me with some information, that would be great. If you
can provide me with a couple of resources, that would be better. I am assuming this mean creating, regenerating and so on.