Post reply

TDE does not make the is_master_key_encrypted_by_server value to 1.

  • June 30, 2015 at 10:39 am

    #302133

    Hello Experts,

    Any reason why the TDE does not turn the is_master_key_encrypted_by_server value to 1. The column in table "databases" database.

    Is there anything special to be done to get it 1?

    Please suggest

    Thanks.

  • June 30, 2015 at 2:53 pm

    #1809307

    All I can find is this:

    is_master_key_encrypted_by_server

    bit

    1 = Database has an encrypted master key.

    0 = Database does not have an encrypted master key.

    Here is the url where I found it:

    https://msdn.microsoft.com/en-us/library/ms178534(v=sql.105).aspx

  • June 30, 2015 at 5:37 pm

    #1809345

    So if the databases state says = 3 (I.e. encrypted) and is_encrypted column value says = 1, so can I term that the db is properly encrypted?

    I did something extra.

    I restored the database to another environment and ensured that the certificate process worked.

    Perhaps, I am still in doom as to confirm "myself" how that column is inter-linked and if the is_master_key_encrypted value is 0, will it create any mess?

    Thanks.

  • July 1, 2015 at 1:11 am

    #1809374

    SQL-DBA-01 (6/30/2015)

    Hello Experts,

    Any reason why the TDE does not turn the is_master_key_encrypted_by_server value to 1. The column in table "databases" database.

    Is there anything special to be done to get it 1?

    Please suggest

    As i said before in a previous post to you this column in sys.databases will not be set for a TDE protected database.

    The DMK used for TDE is created in master, it is this database that will have this column set to 1 😉

    -----------------------------------------------------------------------------------------------------------

    "Ya can't make an omelette without breaking just a few eggs" 😉

Viewing 4 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply