I feel really stupid asking this question but I cant find a clear answer, it seems to be assumed in all the material I have been reading.
When implementing TDE encryption an instance, does each database require it's own certificate or do you use the same certificate and then enable on all databases?