I have some questions regarding implementing encryption at database level:

Our security people wants to change keys every 90 days. Do I need to

1. change the pwd at service master key?

2. decrypt and re-encrypt data?

Thanks,