As the title says, we have an existing availability group with a few databases and we'd like to enable TDE. I know that to do so we want to make sure all the servers have a database master key and the same certificate on each of them, however my question is what would happen if a failover event were to trigger from the Availability Group while the database was still in the process of encrypting?
Would it safely fail over to the secondary server in the AG and continue encryption safely? Would it safely fail over but the encryption would not complete? Would there be errors caused with the failover due to the fact that it was still in the process of encrypting?