• Small correction: tempdb can be encrypted using TDE:

    When TDE is enabled on any user database, encryption is also automatically enabled for the temporary database (tempdb). This prevents temporary objects that are used by the user database from leaking to disk. System databases other than tempdb cannot currently be encrypted by using TDE.

    Best Regards,

    Chris Büttner