0

As I was doing some testing with encryption on our test environment I used the FORCE command to have the SMK be the same on primary and secondary.

I've tried dropping the encrypted database on both primary and secondary and restore again a fresh copy and do the encryption again from start with new DMK. Then I tried to failover just to see if I can still decrypt and to my surprise I was still able to do so.

Question: Is there anyway to revoke/revert the "FORCE" command that I did?

1 Answer 1

0

Is there anyway to revoke/revert the "FORCE" command that i did?

If you have a previous copy of the SMK saved then you can restore it over the one you forced. However, you'll be in the same spot with some items encrypted with the old SMK and some with the forced. You'll need to add an encryptor by password to anything on the primary side and then run sp_control_db_master_key_password on the secondary side to take care of this without the need of changing the SMK.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.