{"id":35639,"date":"2019-04-04T13:25:10","date_gmt":"2019-04-04T20:25:10","guid":{"rendered":"https:\/\/virtual-dba.com\/?p=35639"},"modified":"2021-06-10T14:16:57","modified_gmt":"2021-06-10T21:16:57","slug":"how-to-enable-tde-availability-group","status":"publish","type":"post","link":"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/","title":{"rendered":"How to Enable TDE on Availability Group"},"content":{"rendered":"\n<p>Transparent Data Encryption(TDE) encrypts SQL and azure database files by encrypting data at rest. In a situation where your physical media such as data, log and backup files get stolen the malicious party can restore\/attach the database and retrieve data. TDE protects this by not letting the database restored\/attached without the associated certificate and key.<\/p>\n\n\n\n<p><strong>Note: When enabling TDE, make sure to backup the certificate and the key associated with the certificate. Without the certificate, you will never be able to restore\/attach the database to a different server. The certificate should be available even if the TDE is disabled, part of the transaction log may still remain protected and the certificate may be required until a full backup is performed.<\/strong><\/p>\n\n\n\n<p>Enabling TDE isn&#8217;t as straightforward as it is for a database outside of an availability group. Databases that are in the availability group requires certain considerations and precautions to enable TDE which is explained step by step as follows:<\/p>\n\n\n\n<p>1.Here we have a 3 node cluster and as you can see we only have 1 test database on the primary replica and it\u2019s not part of the availability group yet. When enabling TDE on AlwaysOn, you want to make sure that your databases have been removed from the AG or else the database on the secondary nodes will change to SUSPECT MODE.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/virtual-dba.com\/wp-content\/uploads\/1b04a73085d04da881e08c66b3b11ace.png\" alt=\"3 node cluster\"\/><\/figure>\n\n\n\n<p>ON THE PRIMARY NODE &#8211; Verify that the primary node has a Database Master Key (DMK) in the master database.<\/p>\n\n\n\n<p>USE master<br> GO<\/p>\n\n\n\n<p>SELECT * FROM<br>sys.symmetric_keys<br>WHERE name = &#8216;##MS_DatabaseMasterKey##&#8217;<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/virtual-dba.com\/wp-content\/uploads\/9112bc8a153ae2de7444e0827c5a4d6a.png\" alt=\"primary node\"\/><\/figure>\n\n\n\n<p>2. As shown above, the Master Key doesn&#8217;t exist. In this case, we&#8217;ll have to create the Master Key.<\/p>\n\n\n\n<p>USE master;<br>GO<\/p>\n\n\n\n<p>CREATE MASTER KEY ENCRYPTION<br> BY PASSWORD = &#8216;P@$$word1234&#8217;; <br>GO<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/virtual-dba.com\/wp-content\/uploads\/6a73a172235eb510b7d1ce1ad12b595e.png\" alt=\"create master key\"\/><\/figure>\n\n\n\n<p><strong>Note: Make sure to use a complex password and store it in a password vault to avoid any risk of compromisation.<\/strong><\/p>\n\n\n\n<p>3. Create the Certificate for the test database<\/p>\n\n\n\n<p>USE master;<br>GO<\/p>\n\n\n\n<p>CREATE CERTIFICATE test_Cert WITH SUBJECT = &#8216;test Encryption Certificate&#8217;;<br> GO<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/virtual-dba.com\/wp-content\/uploads\/76b45bb4d764c9f822d8bee2c8c5a2b6.png\" alt=\"certificate for test database\"\/><\/figure>\n\n\n\n<p>4. Run the following script to check if the certificate was created<\/p>\n\n\n\n<p>SELECT name, pvt_key_encryption_type_desc <br>FROM sys.certificates WHERE name = &#8216;test_Cert&#8217;<br> GO<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/virtual-dba.com\/wp-content\/uploads\/078e96233a24bc00bd0171816868b529.png\" alt=\"certificate check\"\/><\/figure>\n\n\n\n<p>5. Backup the certificate on a shared location where all 3 node has access and keep it in a secure place<\/p>\n\n\n\n<p>BACKUP CERTIFICATE test_Cert <br>TO FILE=&#8217;\\\\10.10.XX.XXX\\sqlbackup\\Database Certificates\\test_Cert.certbak&#8217; <br>WITH PRIVATE KEY (FILE=&#8217;\\\\10.10.XX.XXX\\sqlbackup\\Database Certificates\\test_Cert.pkbak&#8217;, ENCRYPTION BY PASSWORD=&#8217;P@$$word1234&#8242;) <br> GO<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/virtual-dba.com\/wp-content\/uploads\/b46c2374d2456959da04d5eacdcbe2dc.png\" alt=\"backup certificate \"\/><\/figure>\n\n\n\n<p>6. Create AES_256 encryption using the certificate<\/p>\n\n\n\n<p>USE test; &nbsp;<br> GO<\/p>\n\n\n\n<p>CREATE DATABASE ENCRYPTION KEY <br> WITH ALGORITHM = AES_256  <br> ENCRYPTION BY SERVER CERTIFICATE test_Cert;<br> GO<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/virtual-dba.com\/wp-content\/uploads\/3e96d17d92998ee951dfc46156568ba8.png\" alt=\"create encryption \"\/><\/figure>\n\n\n\n<p>7. Enable the encryption on the database<\/p>\n\n\n\n<p>USE test;<br> GO<\/p>\n\n\n\n<p>ALTER DATABASE test<br> SET ENCRYPTION ON;<br> GO<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/virtual-dba.com\/wp-content\/uploads\/4f23ba392d199f4f38b395d2007ff9a8.png\" alt=\"enable the encryption \"\/><\/figure>\n\n\n\n<p>8. Check to verify the database was encrypted<\/p>\n\n\n\n<p>SELECT name, is_encrypted, compatibility_level<br>FROM sys.databases where name = &#8216;test&#8217;<br> GO<\/p>\n\n\n\n<p>How to find details about each database that is encrypted<br>SELECT * FROM sys.dm_database_encryption_keys<br> GO<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/virtual-dba.com\/wp-content\/uploads\/08394fe4dcabff5f62408df33d5e55d0.png\" alt=\"verify database was encrypted \"\/><\/figure>\n\n\n\n<p>9. Take a full backup of the database. Do copy-only if it&#8217;s a part of a backup maintenance plan so that you don&#8217;t break the backup chain if you need to revert back.<\/p>\n\n\n\n<p>BACKUP DATABASE [test]<br> TO &nbsp;DISK = N&#8217;\\\\10.10.XX.XXX\\sqlbackup\\Full_Backup_Cert\\test_Cert.bak&#8217; WITH COPY_ONLY, NOFORMAT, NOINIT, NAME = N&#8217;test-Full Database Backup&#8217;, <br>SKIP, NOREWIND, NOUNLOAD, COMPRESSION, STATS = 1<br> GO<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/virtual-dba.com\/wp-content\/uploads\/4f4ce817451c49f6d642109f279115ed.png\" alt=\"full backup of the database\"\/><\/figure>\n\n\n\n<p>10. Take a log backup(To make it a part of an AG with TDE enabled a log backup is required)<\/p>\n\n\n\n<p>BACKUP LOG [test] <br>TO &nbsp;DISK = N&#8217;\\\\10.10.XX.XXX\\sqlbackup\\Log_Backup_Cert\\test_Cert.trn&#8217; WITH NOFORMAT, NOINIT, NAME = N&#8217;test-Full Database Backup&#8217;, <br>SKIP, NOREWIND, NOUNLOAD, COMPRESSION, STATS = 1<br> GO<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/virtual-dba.com\/wp-content\/uploads\/ec2345333b4ab87f6c0804b4036ee12f.png\" alt=\"log backup\"\/><\/figure>\n\n\n\n<p>11. ON THE SECONDARY NODES \u2013 Create the same Database Master Key (DMK) in the master database that was created on Node 1 for Node 2 and Node 3.<\/p>\n\n\n\n<p>Run this script on all secondary nodes, both Node 2 and Node 3<br> USE master<br> GO<\/p>\n\n\n\n<p>CREATE MASTER KEY ENCRYPTION<br> BY PASSWORD = &#8216;P@$$word1234&#8217;<br> GO<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/virtual-dba.com\/wp-content\/uploads\/86454e126c23197d197e26416168b7db.png\" alt=\"secondary nodes\"\/><\/figure>\n\n\n\n<p>12. Transfer the certificate from the certificate backup on both the secondary nodes, Node 2 and Node 3<\/p>\n\n\n\n<p>CREATE CERTIFICATE test <br>FROM FILE=&#8217;\\\\10.10.XX.XXX\\sqlbackup\\Database Certificates\\test_Cert.certbak&#8217;<br> WITH PRIVATE KEY(FILE=&#8217;\\\\10.10.XX.XXX\\sqlbackup\\Database Certificates\\test_Cert.pkbak&#8217;,<br> DECRYPTION BY PASSWORD=&#8217;P@$$word1234&#8242;)<br> GO&gt;<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/virtual-dba.com\/wp-content\/uploads\/f0e35cd98f77157de508b922f49238b1.png\" alt=\"transfer certificate \"\/><\/figure>\n\n\n\n<p>13. Restore the full backup followed by the log backup of the encrypted test database with No-Recovery mode. We want the database to be in restoring mode so we can join it later to the Availability Group via script. On both the secondary nodes, we are using the backups we took earlier from the primary node.<\/p>\n\n\n\n<p>USE [master]<br> GO<br> RESTORE DATABASE [test]<br> FROM &nbsp;DISK = N&#8217;\\\\10.10.XX.XXX\\sqlbackup\\Full_Backup_Cert\\test_Cert.bak&#8217; WITH FILE = 1, NORECOVERY, NOUNLOAD, STATS = 1<br> GO<\/p>\n\n\n\n<p>USE [master]<br> GO<br> RESTORE DATABASE [test]<br> FROM &nbsp;DISK = N&#8217;\\\\10.10.XX.XXX\\sqlbackup\\Log_Backup_Cert\\test_Cert.trn&#8217; WITH FILE = 1, NORECOVERY, NOUNLOAD, STATS = 1<br> GO<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/virtual-dba.com\/wp-content\/uploads\/8e85363036501a4e730697530592fa65.png\" alt=\"restore full backup\"\/><\/figure>\n\n\n\n<p>BACK ON THE PRIMARY NODE<\/p>\n\n\n\n<p>14. Go back to the Primary node and add the database to the availability group. Refresh all of the nodes and you&#8217;ll see that the test database has been successfully added to the AG.<\/p>\n\n\n\n<p>Use master<br> GO<\/p>\n\n\n\n<p>ALTER AVAILABILITY GROUP [TEST-DBCLAG] ADD DATABASE test;<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/virtual-dba.com\/wp-content\/uploads\/10dc96e1647e8003a7de4cd08fcef1fb.png\" alt=\"add database to availability group\"\/><\/figure>\n\n\n\n<p>15. Add Secondary database &#8220;test&#8221; to AOAG &#8220;TEST-DBCLAG&#8221;. This needs be run on secondary node<\/p>\n\n\n\n<p>ALTER DATABASE [test] SET HADR AVAILABILITY GROUP =&nbsp; [TEST-DBCLAG];<\/p>\n\n\n\n<p>Reference: <a href=\"https:\/\/docs.microsoft.com\/en-us\/sql\/relational-databases\/security\/encryption\/transparent-data-encryption?view=sql-server-2017\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\">https:\/\/docs.microsoft.com\/en-us\/sql\/relational-databases\/security\/encryption\/transparent-data-encryption?view=sql-server-2017<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Transparent Data Encryption(TDE) encrypts SQL and azure database files by encrypting data at rest. In a situation where your physical media such as data, log and backup files get stolen the malicious party can restore\/attach the database and retrieve data. TDE protects this by not letting the database restored\/attached without the associated certificate and key. [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":35659,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"off","_et_pb_old_content":"","_et_gb_content_width":"","content-type":"","footnotes":""},"categories":[4166,55],"tags":[1957,60,3957],"class_list":["post-35639","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","category-sql-server","tag-always-on","tag-sql-server","tag-tde"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.1 (Yoast SEO v27.1.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>How to enable TDE on Availability Group<\/title>\n<meta name=\"description\" content=\"Enabling TDE isn\u2019t as straightforward as it is for a database outside of an availability group. This post explains the certain considerations and precautions to enable TDE.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Enable TDE on Availability Group\" \/>\n<meta property=\"og:description\" content=\"Enabling TDE isn\u2019t as straightforward as it is for a database outside of an availability group. This post explains the certain considerations and precautions to enable TDE.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/\" \/>\n<meta property=\"og:site_name\" content=\"Virtual-DBA Remote DBA Services &amp; Support - Certified Database Experts\" \/>\n<meta property=\"article:published_time\" content=\"2019-04-04T20:25:10+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-06-10T21:16:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/virtual-dba.com\/media\/How-to-Enable-TDE-on-Availability-Group.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"557\" \/>\n\t<meta property=\"og:image:height\" content=\"291\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"XTIVIA\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@virtual_dba\" \/>\n<meta name=\"twitter:site\" content=\"@virtual_dba\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"XTIVIA\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/\"},\"author\":{\"name\":\"XTIVIA\",\"@id\":\"https:\/\/virtual-dba.com\/#\/schema\/person\/2d86f74bed0c3f1b49100f7fdf7d78d1\"},\"headline\":\"How to Enable TDE on Availability Group\",\"datePublished\":\"2019-04-04T20:25:10+00:00\",\"dateModified\":\"2021-06-10T21:16:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/\"},\"wordCount\":889,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/virtual-dba.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/virtual-dba.com\/wp-content\/uploads\/How-to-Enable-TDE-on-Availability-Group.jpg\",\"keywords\":[\"always on\",\"sql server\",\"TDE\"],\"articleSection\":[\"Blog\",\"SQL Server\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/\",\"url\":\"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/\",\"name\":\"How to enable TDE on Availability Group\",\"isPartOf\":{\"@id\":\"https:\/\/virtual-dba.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/virtual-dba.com\/wp-content\/uploads\/How-to-Enable-TDE-on-Availability-Group.jpg\",\"datePublished\":\"2019-04-04T20:25:10+00:00\",\"dateModified\":\"2021-06-10T21:16:57+00:00\",\"description\":\"Enabling TDE isn\u2019t as straightforward as it is for a database outside of an availability group. This post explains the certain considerations and precautions to enable TDE.\",\"breadcrumb\":{\"@id\":\"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/#primaryimage\",\"url\":\"https:\/\/virtual-dba.com\/wp-content\/uploads\/How-to-Enable-TDE-on-Availability-Group.jpg\",\"contentUrl\":\"https:\/\/virtual-dba.com\/wp-content\/uploads\/How-to-Enable-TDE-on-Availability-Group.jpg\",\"width\":557,\"height\":291},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/virtual-dba.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Enable TDE on Availability Group\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/virtual-dba.com\/#website\",\"url\":\"https:\/\/virtual-dba.com\/\",\"name\":\"Virtual-DBA Remote DBA Services &amp; Support - Certified Database Experts\",\"description\":\"Remote Database Administration\",\"publisher\":{\"@id\":\"https:\/\/virtual-dba.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/virtual-dba.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/virtual-dba.com\/#organization\",\"name\":\"Virtual-DBA: Remote DBA | Remote Database Administration\",\"alternateName\":\"Virtual-DBA powered by XTIVIA\",\"url\":\"https:\/\/virtual-dba.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/virtual-dba.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/virtual-dba.com\/wp-content\/uploads\/V-DBA-Database-Services-and-Support-Featured-Logo.jpg\",\"contentUrl\":\"https:\/\/virtual-dba.com\/wp-content\/uploads\/V-DBA-Database-Services-and-Support-Featured-Logo.jpg\",\"width\":557,\"height\":291,\"caption\":\"Virtual-DBA: Remote DBA | Remote Database Administration\"},\"image\":{\"@id\":\"https:\/\/virtual-dba.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/virtual_dba\",\"https:\/\/www.linkedin.com\/showcase\/36220649\/\",\"https:\/\/www.youtube.com\/channel\/UCx3AIeUQ2ziTLKZSJDZ-SEg\"],\"description\":\"Eliminate database downtime and spiraling costs with XTIVIA\u2019s Virtual-DBA. In today\u2019s always-on business world, gaps in 24x7 on-call DBA support, neglected maintenance and security, or a stretched team struggling with overwhelming workloads can lead to costly disruptions and threaten business continuity. XTIVIA\u2019s Virtual-DBA provides the immediate, expert database administration you need, exactly when you need it, ensuring optimal performance, ironclad security, and significant cost savings without the burden of expanding your in-house team. The goal of Virtual-DBA is to provide a cost-effective solution for organizations seeking to optimize the security, management, maintenance, availability, and performance of their critical business systems, whether self-managed or cloud-managed (e.g., AWS RDS, Azure SQL Database). We accomplish this through a comprehensive remote DBA service offering designed specifically to meet the Oracle\u00ae, DB2\u00ae, Informix\u00ae, MySQL\u2122, PostgreSQL\u00ae, MongoDB\u00ae, MariaDB, and Microsoft SQL Server\u00ae, CockroachDB, Databricks, AWS, and Azure needs of our clients.\",\"email\":\"info@xtivia.com\",\"telephone\":\"8886853101\",\"legalName\":\"XTIVIA, Inc\",\"foundingDate\":\"1992-05-01\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"minValue\":\"201\",\"maxValue\":\"500\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/virtual-dba.com\/#\/schema\/person\/2d86f74bed0c3f1b49100f7fdf7d78d1\",\"name\":\"XTIVIA\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/virtual-dba.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/0d3648a00e319a37cf8d6d19f762acfbbb4fd0320fd8a6d6b1e64f44a2a6f259?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/0d3648a00e319a37cf8d6d19f762acfbbb4fd0320fd8a6d6b1e64f44a2a6f259?s=96&d=mm&r=g\",\"caption\":\"XTIVIA\"},\"url\":\"https:\/\/virtual-dba.com\/author\/xtivia\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How to enable TDE on Availability Group","description":"Enabling TDE isn\u2019t as straightforward as it is for a database outside of an availability group. This post explains the certain considerations and precautions to enable TDE.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/","og_locale":"en_US","og_type":"article","og_title":"How to Enable TDE on Availability Group","og_description":"Enabling TDE isn\u2019t as straightforward as it is for a database outside of an availability group. This post explains the certain considerations and precautions to enable TDE.","og_url":"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/","og_site_name":"Virtual-DBA Remote DBA Services &amp; Support - Certified Database Experts","article_published_time":"2019-04-04T20:25:10+00:00","article_modified_time":"2021-06-10T21:16:57+00:00","og_image":[{"width":557,"height":291,"url":"https:\/\/virtual-dba.com\/media\/How-to-Enable-TDE-on-Availability-Group.jpg","type":"image\/jpeg"}],"author":"XTIVIA","twitter_card":"summary_large_image","twitter_creator":"@virtual_dba","twitter_site":"@virtual_dba","twitter_misc":{"Written by":"XTIVIA","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/#article","isPartOf":{"@id":"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/"},"author":{"name":"XTIVIA","@id":"https:\/\/virtual-dba.com\/#\/schema\/person\/2d86f74bed0c3f1b49100f7fdf7d78d1"},"headline":"How to Enable TDE on Availability Group","datePublished":"2019-04-04T20:25:10+00:00","dateModified":"2021-06-10T21:16:57+00:00","mainEntityOfPage":{"@id":"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/"},"wordCount":889,"commentCount":0,"publisher":{"@id":"https:\/\/virtual-dba.com\/#organization"},"image":{"@id":"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/#primaryimage"},"thumbnailUrl":"https:\/\/virtual-dba.com\/wp-content\/uploads\/How-to-Enable-TDE-on-Availability-Group.jpg","keywords":["always on","sql server","TDE"],"articleSection":["Blog","SQL Server"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/","url":"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/","name":"How to enable TDE on Availability Group","isPartOf":{"@id":"https:\/\/virtual-dba.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/#primaryimage"},"image":{"@id":"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/#primaryimage"},"thumbnailUrl":"https:\/\/virtual-dba.com\/wp-content\/uploads\/How-to-Enable-TDE-on-Availability-Group.jpg","datePublished":"2019-04-04T20:25:10+00:00","dateModified":"2021-06-10T21:16:57+00:00","description":"Enabling TDE isn\u2019t as straightforward as it is for a database outside of an availability group. This post explains the certain considerations and precautions to enable TDE.","breadcrumb":{"@id":"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/#primaryimage","url":"https:\/\/virtual-dba.com\/wp-content\/uploads\/How-to-Enable-TDE-on-Availability-Group.jpg","contentUrl":"https:\/\/virtual-dba.com\/wp-content\/uploads\/How-to-Enable-TDE-on-Availability-Group.jpg","width":557,"height":291},{"@type":"BreadcrumbList","@id":"https:\/\/virtual-dba.com\/blog\/how-to-enable-tde-availability-group\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/virtual-dba.com\/"},{"@type":"ListItem","position":2,"name":"How to Enable TDE on Availability Group"}]},{"@type":"WebSite","@id":"https:\/\/virtual-dba.com\/#website","url":"https:\/\/virtual-dba.com\/","name":"Virtual-DBA Remote DBA Services &amp; Support - Certified Database Experts","description":"Remote Database Administration","publisher":{"@id":"https:\/\/virtual-dba.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/virtual-dba.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/virtual-dba.com\/#organization","name":"Virtual-DBA: Remote DBA | Remote Database Administration","alternateName":"Virtual-DBA powered by XTIVIA","url":"https:\/\/virtual-dba.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/virtual-dba.com\/#\/schema\/logo\/image\/","url":"https:\/\/virtual-dba.com\/wp-content\/uploads\/V-DBA-Database-Services-and-Support-Featured-Logo.jpg","contentUrl":"https:\/\/virtual-dba.com\/wp-content\/uploads\/V-DBA-Database-Services-and-Support-Featured-Logo.jpg","width":557,"height":291,"caption":"Virtual-DBA: Remote DBA | Remote Database Administration"},"image":{"@id":"https:\/\/virtual-dba.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/virtual_dba","https:\/\/www.linkedin.com\/showcase\/36220649\/","https:\/\/www.youtube.com\/channel\/UCx3AIeUQ2ziTLKZSJDZ-SEg"],"description":"Eliminate database downtime and spiraling costs with XTIVIA\u2019s Virtual-DBA. In today\u2019s always-on business world, gaps in 24x7 on-call DBA support, neglected maintenance and security, or a stretched team struggling with overwhelming workloads can lead to costly disruptions and threaten business continuity. XTIVIA\u2019s Virtual-DBA provides the immediate, expert database administration you need, exactly when you need it, ensuring optimal performance, ironclad security, and significant cost savings without the burden of expanding your in-house team. The goal of Virtual-DBA is to provide a cost-effective solution for organizations seeking to optimize the security, management, maintenance, availability, and performance of their critical business systems, whether self-managed or cloud-managed (e.g., AWS RDS, Azure SQL Database). We accomplish this through a comprehensive remote DBA service offering designed specifically to meet the Oracle\u00ae, DB2\u00ae, Informix\u00ae, MySQL\u2122, PostgreSQL\u00ae, MongoDB\u00ae, MariaDB, and Microsoft SQL Server\u00ae, CockroachDB, Databricks, AWS, and Azure needs of our clients.","email":"info@xtivia.com","telephone":"8886853101","legalName":"XTIVIA, Inc","foundingDate":"1992-05-01","numberOfEmployees":{"@type":"QuantitativeValue","minValue":"201","maxValue":"500"}},{"@type":"Person","@id":"https:\/\/virtual-dba.com\/#\/schema\/person\/2d86f74bed0c3f1b49100f7fdf7d78d1","name":"XTIVIA","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/virtual-dba.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/0d3648a00e319a37cf8d6d19f762acfbbb4fd0320fd8a6d6b1e64f44a2a6f259?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/0d3648a00e319a37cf8d6d19f762acfbbb4fd0320fd8a6d6b1e64f44a2a6f259?s=96&d=mm&r=g","caption":"XTIVIA"},"url":"https:\/\/virtual-dba.com\/author\/xtivia\/"}]}},"_links":{"self":[{"href":"https:\/\/virtual-dba.com\/wp-json\/wp\/v2\/posts\/35639","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/virtual-dba.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/virtual-dba.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/virtual-dba.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/virtual-dba.com\/wp-json\/wp\/v2\/comments?post=35639"}],"version-history":[{"count":0,"href":"https:\/\/virtual-dba.com\/wp-json\/wp\/v2\/posts\/35639\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/virtual-dba.com\/wp-json\/wp\/v2\/media\/35659"}],"wp:attachment":[{"href":"https:\/\/virtual-dba.com\/wp-json\/wp\/v2\/media?parent=35639"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/virtual-dba.com\/wp-json\/wp\/v2\/categories?post=35639"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/virtual-dba.com\/wp-json\/wp\/v2\/tags?post=35639"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}