Restore SQL Server DB encrypted by EKM - where's the asymmetric key?
1
vote
1
answer
1289
views
MS is clear about restoring TDE backups: Certificate has to be restored on destination OR, in case of EKM, the asymmetric key
"
When moving a TDE protected database, you must also move the certificate or [[asymmetric key]] that is used to open the DEK. The certificate or asymmetric key must be installed in the master database of the destination server, so that SQL Server can access the database files
"
Now, there is no asymmetric backup built-in SQL Server. We might assume that the EK can export it or so?? we can restore Asym keys created as strong name files but the create statement of Asym key with EKM does not look to support a source file
CREATE ASYMMETRIC KEY SQL_EKM_RSA_2048_Key_TDE
FROM Provider [SafeNetLunaHSM]
WITH ALGORITHM = RSA_2048,
PROVIDER_KEY_NAME = 'EKM_RSA_2048_Key_TDE',
CREATION_DISPOSITION=CREATE_NEW
I am using Safenet Luna HSM. Has anyone been in a similar situation? simply restoring a TDE backup from EKM source to Native TDE destination.
Appreciate the help
Asked by Mada
(11 rep)
Apr 18, 2018, 09:50 PM
Last activity: Apr 20, 2018, 12:40 PM
Last activity: Apr 20, 2018, 12:40 PM