Removing TDE

  • sperry-750868

    SSCommitted

    Points: 1505

    Comments posted to this topic are about the item Removing TDE

  • crazy4sql

    SSCoach

    Points: 19590

    Hi Steve, how about if we have 5 user database enabled with TDE and want to remove TDE permanently only on one/few database?

    ----------
    Ashish

  • Martin Bell-290511

    SSC Enthusiast

    Points: 161

    One thing the article does not take into account is all the backups that will be in-accessible if the certificates are removed. I have a couple of posts about this area http://tinyurl.com/tdeandbackups and http://tinyurl.com/tdeandbackups2 about this.

  • Resender

    SSCertifiable

    Points: 7285

    Around 10 months ago I deployed TDE on a database I was developping, when I turned it off I was confronted with this problem.

    I had to remove the database and use a backup from for the TDE to restore it, luckily no data was lost since it was still a 'proof-of-concept' database.

    A few months later we deployed it without TDE since we still needed a lot of work and now we're in the process of removing it since its design no longer fits into the concept it was designed for.

  • Sean Elliott (UK)

    SSCommitted

    Points: 1626

    Thanks for this Steve - I've added a link back to this in my article "TDE Setup and Administration Scripts"

    here:

    http://www.sqlservercentral.com/articles/TDE/72562/

  • M&M

    SSC-Insane

    Points: 21699

    Thank you Steve, you have made a complex scenario simple to understand. I have saved this article in briefcase, never know when I may need it 🙂

    M&M

  • John Ignasiak

    Valued Member

    Points: 65

    Thanks Steve, we are just starting to look at encryption. Good to know the gotchas.

  • bdavey

    Default port

    Points: 1459

    Thanks Steve. Awesome article. I'm adding this one to my briefcase.

  • DCPeterson

    SSCoach

    Points: 15150

    This is one of those knowledge from hard experience things...nice of you to share.

    /*****************

    If most people are not willing to see the difficulty, this is mainly because, consciously or unconsciously, they assume that it will be they who will settle these questions for the others, and because they are convinced of their own capacity to do this. -Friedrich August von Hayek

    *****************/

  • Andre Guerreiro

    SSCertifiable

    Points: 7319

    Thank you for sharing the article.

    It's something great to know before facing a situation like that which may get people fired if they're not careful.

    Best regards,

    Best regards,

    Andre Guerreiro Neto

    Database Analyst
    http://www.softplan.com.br
    MCITPx1/MCTSx2/MCSE/MCSA

  • SQLDCH

    SSChampion

    Points: 11522

    Excellent article. My proof of concept showed that it couldn't be removed, I'm glad you wrote this.

    ----------------------------------------------------------------------------
    Sacramento SQL Server users group - http://sac.sqlpass.org
    Follow me on Twitter - @SQLDCH
    ----------------------------------------------------------------------------

    Yeah, well...The Dude abides.
  • SequelDBA

    Ten Centuries

    Points: 1093

    Well done Steve... Thank you

    KU

  • sperry-750868

    SSCommitted

    Points: 1505

    Thanks for all the comments. I have just come back from holiday and seeing all the positive comments has helped chase away the post holiday depression!

  • sperry-750868

    SSCommitted

    Points: 1505

    crazy4sql (11/2/2011)


    Hi Steve, how about if we have 5 user database enabled with TDE and want to remove TDE permanently only on one/few database?

    Hi Ashish

    The steps apply in the same way to a single database, just don't remove the certificate if it is used by the other encrypted databases.

    Steve

  • crazy4sql

    SSCoach

    Points: 19590

    Many Thanks Steve.

    So if I have to move the TDE enabled database to other server where TDE is not enabled, is my approach correct;

    1) Remove TDE on Source database

    2) Backup Databse

    3) Restore databse

    ----------
    Ashish

Viewing 15 posts - 1 through 15 (of 23 total)

You must be logged in to reply to this topic. Login to reply