I'm referring to TDE encryption.

When we regenerate the DEK or create a new certificate and encrypt using certificate, does it decrypt/reencrypt the data itself?