We currently use SQL Server 2012 AG are in process of migrating to SQL 2016. We use EMC SAN for storage and it provides the data encryption at rest on hardware level. Some folks are thinking about start using TDE that also provides encryption at rest only that we already have.
While it's not so difficult to implement TDE, it, in my opinion, creates a lot headache in terms of managing and administrating. From your experience, is it good idea to use TDE in our situation? Is it worth? How well TDE compatible with AlwaysOn AGs? I read, for example, you can't use AG GUI to do anything. Everything has to be done through scripts.