Quantcast
Channel: SQLServerCentral » SQL Server 2014 » Administration - SQL Server 2014 » Latest topics
Viewing all articles
Browse latest Browse all 6525

Check my logic - moving TDE Encrypted databases and changing the encryption certificate

$
0
0
I have a new SQL Server 2014 instance that I need to import many older SQL 2012 databases to in an effort to refresh a development environment. The current 2012 databases are encrypted via TDE but the certificate that was originally used has since expired. I know that doesn't matter in terms of usability (you just get a warning message when it is used apparently). Still, since I am having to make this move I'd like to create a new certificate to encrypt the databases on their new home on SQL 2014 and eventually use this same certificate on the upcoming production server. The databases in question will remain in place on their SQL 2012 home until a new production server instance is created. I am thinking the best way to proceed is to:- Create a new certificate on the 2014 server- Back up (save) the newly created certificate for eventual restoration to the new prod server when availableThen:- Un-encrypt the database(s) in place on the SQL 2012 server- Make a copy only backup of the database(s) on the 2012 server- Re-encrypt the database(s) on the 2012 server- Restore the un-encrypted database(s) to the new 2014 server- Re-encrypt the database(s) using the new certificate- Repeat as necessaryAm I missing anything glaring here, or is my methodology otherwise flawed? Does anyone have any further advice?

Viewing all articles
Browse latest Browse all 6525

Trending Articles