When a virtual machine with a SQL Server database that uses TDE is copied or cloned, will the database be readable on the new instance?

  • For cloning it should work, i don't understand what copied means here.
    – Shanky
    Jul 1, 2020 at 13:46
  • @Shanky - same thing, I guess. VMWare distinguishes between "copying" and "moving" and I was curious if either would affect the machine key or other "unique" things on the machine..
    – cdonner
    Jul 1, 2020 at 16:50

1 Answer 1


Yes, cloning or copying a VM should not make a database using TDE unreadable or unavailable on the new cloned VM.

If you check the Move a TDE Protected Database to Another SQL Server doc, which by the way is not specifically what you're trying to do, but lists the restrictions that could cause a TDE database unable to be decrypted on a different server, you'll see that none of the Limitations and Restrictions rules are broken when copying or cloning a VM.

Every "piece" needed to decrypt the database is going to be copied along with the VM and everything shall be at the same place within the new VM.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.