I'm trying to ship some TDE enabled database backups from one server to another and I'm having a problem. Specifically, I'm getting the following error:
RESTORE FILELISTONLY FROM DISK = N'<path>' Msg 33111, Level 16, State 3, Line 10 Cannot find server certificate with thumbprint '0x<thumbprint>'. Msg 3013, Level 16, State 1, Line 10 RESTORE FILELIST is terminating abnormally
So the first and most obvious thing to check - does the server certificate exist? The answer is yes. Here's what I ran on the source server:
BACKUP CERTIFICATE TDE TO FILE = 'C:\Temp\TDE' WITH PRIVATE KEY ( FILE = 'C:\Temp\PK' , ENCRYPTION BY PASSWORD = 'xxxx' );
And on the destination server:
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'xxxx'; CREATE CERTIFICATE TDE FROM FILE = 'C:\Temp\TDE' WITH PRIVATE KEY ( FILE = 'C:\Temp\PK', DECRYPTION BY PASSWORD = 'xxxx' );
If I run SELECT * FROM sys.certificates on both servers, I get an identical result (barring an extra column in the schema - source is SQL2012, destination is SQL2016) and the thumbprint exactly matches what I'm seeing in the error.
So what am I overlooking? I've done this many times before without issue, and countless blog entries seem to confirm my process. Has anyone ever run into a similar issue?