I have 2 databases in AlwaysOn with TDE enabled. My TDE cert expired and i created a new one but Ola's Backup script is still failing:
EXECUTE [dbo].[DatabaseBackup]
@Databases = 'DB1, DB2',
@Directory = 'D:\SQL-Backup',
@CopyOnly='Y',
@CleanupTime = 120,
@Compress='Y',
@BackupType = 'FULL',
@Verify = 'N',
@CheckSum = 'Y',
@Encrypt = 'Y',
@EncryptionAlgorithm = 'AES_256',
@ServerCertificate = 'DB_DEK',
@LogToTable = 'Y'
With this error (which is an old Cert):
Msg 33111, Level 16, State 3, Line 1
Cannot find server certificate with thumbprint '0xFAF8C09F62ED7D523AE634133331690FC2FD8367'.
Using native sql backup works:
BACKUP Database [DB1]
TO DISK = N'D:\SQL-Backup\DB1.bak'
WITH FORMAT, INIT, NAME = N'DB1-Full Database Backup', SKIP, NOREWIND, NOUNLOAD,
ENCRYPTION(ALGORITHM = AES_256, SERVER CERTIFICATE = [DB_DEK]), STATS = 10
GO
For this to work I had to take the DBs from AlwaysOn.
Has anyone else experienced this type of scenario? And, if so, how did you resolve it?
COPY_ONLY
backup, but not the native backup?DB_DEK
with same algorithm ?