TDE: Database Encryption key to be changed from 128 bit to 256 bit encryption

• SQL_Hunt

  SSC-Dedicated

  Points: 33518

  More actions

  July 19, 2022 at 2:47 pm

  #4065349

  Hello,

  I was asked to apply TDE using 128-bit encryption initially. Later on, the new requirement governs to change that to 256-bit encryption. Without dropping the DB encryption key, can we change that from 128 bit to 256 bit encryption?

  Thanks

  Sourav

  Thanks.

• Jo Pattyn

  SSC-Dedicated

  Points: 32350

  More actions

  July 20, 2022 at 1:57 pm

  #4065969

  Apperently it can with an alter statement

  https://social.msdn.microsoft.com/Forums/sqlserver/en-US/28ee3de6-9dc7-4f4a-9663-cafa531d64c2/tde-how-to-change-encryption-key-algorithm-from-128-to-256

• SQL_Hunt

  SSC-Dedicated

  Points: 33518

  More actions

  July 20, 2022 at 1:58 pm

  #4065972

  Many thanks. This is very useful..

  USE [DB_NAME];

  GO

  ALTER DATABASE ENCRYPTION KEY

  REGENERATE WITH ALGORITHM = AES_256;

  GO

   

  Thanks.

• July 29, 2022 at 7:09 am

  This was removed by the editor as SPAM