Steve Jones - SSC Editor (7/26/2013)
The master key in the CRM database was designed to be misleading to see if you understand. You can create a master key in any database. However for TDE, only the one in the "master" database matters.
The DEK is in the TDE enabled database, and is protected by a cert in master, which you must create first.
Almost got me. Thank you for this further explanation I had to scratch my head and rethink this before I answered. Thanks for forcing us to be alert, even on a Friday.
Not all gray hairs are Dinosaurs!