Removing TDE

Question

Removing TDE

sperry-750868

SSCommitted

Points: 1505
More actions
November 2, 2011 at 11:29 pm

#259444

Comments posted to this topic are about the item Removing TDE

Viewing 15 posts - 1 through 15 (of 22 total)

You must be logged in to reply to this topic. Login to reply

crazy4sql SSCoach Points: 19590 More actions · Answer 1

Hi Steve, how about if we have 5 user database enabled with TDE and want to remove TDE permanently only on one/few database?

----------
Ashish

Martin Bell-290511 SSC Enthusiast Points: 161 More actions · Answer 2

One thing the article does not take into account is all the backups that will be in-accessible if the certificates are removed. I have a couple of posts about this area http://tinyurl.com/tdeandbackups and http://tinyurl.com/tdeandbackups2 about this.

Resender SSCertifiable Points: 7443 More actions · Answer 3

Around 10 months ago I deployed TDE on a database I was developping, when I turned it off I was confronted with this problem.

I had to remove the database and use a backup from for the TDE to restore it, luckily no data was lost since it was still a 'proof-of-concept' database.

A few months later we deployed it without TDE since we still needed a lot of work and now we're in the process of removing it since its design no longer fits into the concept it was designed for.

Sean Elliott (UK) SSCommitted Points: 1626 More actions · Answer 4

Thanks for this Steve - I've added a link back to this in my article "TDE Setup and Administration Scripts"

here:

http://www.sqlservercentral.com/articles/TDE/72562/

M&M SSC-Insane Points: 21700 More actions · Answer 5

Thank you Steve, you have made a complex scenario simple to understand. I have saved this article in briefcase, never know when I may need it 🙂

M&M

John Ignasiak Valued Member Points: 66 More actions · Answer 6

Thanks Steve, we are just starting to look at encryption. Good to know the gotchas.

bdavey Default port Points: 1469 More actions · Answer 7

Thanks Steve. Awesome article. I'm adding this one to my briefcase.

DCPeterson SSCoach Points: 15266 More actions · Answer 8

This is one of those knowledge from hard experience things...nice of you to share.

/*****************

If most people are not willing to see the difficulty, this is mainly because, consciously or unconsciously, they assume that it will be they who will settle these questions for the others, and because they are convinced of their own capacity to do this. -Friedrich August von Hayek

*****************/

Andre Guerreiro SSCertifiable Points: 7319 More actions · Answer 9

Thank you for sharing the article.

It's something great to know before facing a situation like that which may get people fired if they're not careful.

Best regards,

Andre Guerreiro Neto

Database Analyst
http://www.softplan.com.br
MCITPx1/MCTSx2/MCSE/MCSA

SQLDCH SSChampion Points: 11630 More actions · Answer 10

Excellent article. My proof of concept showed that it couldn't be removed, I'm glad you wrote this.

----------------------------------------------------------------------------
Sacramento SQL Server users group - http://sac.sqlpass.org
Follow me on Twitter - @SQLDCH
----------------------------------------------------------------------------

Yeah, well...The Dude abides.

SequelDBA Ten Centuries Points: 1093 More actions · Answer 11

SequelDBA

Ten Centuries

Points: 1093

November 4, 2011 at 7:11 pm

#1403558

Well done Steve... Thank you

KU

sperry-750868 SSCommitted Points: 1505 More actions · Answer 12

Thanks for all the comments. I have just come back from holiday and seeing all the positive comments has helped chase away the post holiday depression!

sperry-750868 SSCommitted Points: 1505 More actions · Answer 13

crazy4sql (11/2/2011)
Hi Steve, how about if we have 5 user database enabled with TDE and want to remove TDE permanently only on one/few database?

Hi Ashish

The steps apply in the same way to a single database, just don't remove the certificate if it is used by the other encrypted databases.

Steve

crazy4sql SSCoach Points: 19590 More actions · Answer 14

Many Thanks Steve.

So if I have to move the TDE enabled database to other server where TDE is not enabled, is my approach correct;

1) Remove TDE on Source database

2) Backup Databse

3) Restore databse

----------
Ashish