Moving TDE enabled DB to standard edition?

  • I have a DB with TDE enabled on Enterprise edition sql server 2008r2. I am actually planning on moving the DB to sql server 2008r2 standard edition. Can someone guide me on how to accomplish it properly. I don't think SQL Server 2008r2 standard edition support TDE. I can only think of turning off the encryption, but is there anything else I should know?

    "He who learns for the sake of haughtiness, dies ignorant. He who learns only to talk, rather than to act, dies a hyprocite. He who learns for the mere sake of debating, dies irreligious. He who learns only to accumulate wealth, dies an atheist. And he who learns for the sake of action, dies a mystic."[/i]

  • Yes, you need to remove TDE from the database, and don't forget to truncate the Tlog.

    I had to do something similar. it was a nightmare!

    1- make sure it's on FULL recovery

    2- Remove TDE

    3- Truncate the Tlog. As in... try to recreate it. I actually had to switch to SIMPLE Mode, shink, and then switch back to FULL

    4- take a full backup, which should be unencryted

    If you see errors like

    80 percent processed

    90 percent processed

    100 percent processed

    Process XXX pages for database... blah blah

    MS33111, Level 16, State 3, line 2

    cannot find server certificate blah bah

    MS33111, Level 16, State 1, line 2

    The file "<databasename>_log" failed to initialized correctly...

    MS33111, Level 16, State 1, line 2

    RESTORE DATABASE terminated abnormally

    it means that the Data file is decrypted, but not the Tlog.

    http://www.sqlservercentral.com/articles/Security/76141/

  • MiguelSQL (1/28/2015)


    Yes, you need to remove TDE from the database, and don't forget to truncate the Tlog.

    I had to do something similar. it was a nightmare!

    1- make sure it's on FULL recovery

    2- Remove TDE

    3- Truncate the Tlog. As in... try to recreate it. I actually had to switch to SIMPLE Mode, shink, and then switch back to FULL

    4- take a full backup, which should be unencryted

    If you see errors like

    80 percent processed

    90 percent processed

    100 percent processed

    Process XXX pages for database... blah blah

    MS33111, Level 16, State 3, line 2

    cannot find server certificate blah bah

    MS33111, Level 16, State 1, line 2

    The file "<databasename>_log" failed to initialized correctly...

    MS33111, Level 16, State 1, line 2

    RESTORE DATABASE terminated abnormally

    it means that the Data file is decrypted, but not the Tlog.

    Thanks!

    "He who learns for the sake of haughtiness, dies ignorant. He who learns only to talk, rather than to act, dies a hyprocite. He who learns for the mere sake of debating, dies irreligious. He who learns only to accumulate wealth, dies an atheist. And he who learns for the sake of action, dies a mystic."[/i]

  • check your sql server version, may need this fix before removing TDE

    -----------------------------------------------------------------------------------------------------------

    "Ya can't make an omelette without breaking just a few eggs" 😉

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply