Post reply

TDE Certificate backup

  • August 16, 2017 at 3:35 am

    #327947

    Hi Guys,

    I am trying to backup a certificate that I created for TDE but I am not successful. Please see my scrip below and also the error message:
    BACKUP CERTIFICATE TDE_Cert
    TO FILE = 'C:\SQL Server\AdventureWorks Certificate'
    WITH PRIVATE KEY (file='C:\SQL Server\AdventureWorks Certificate\TDE_CertKey.pvk',
    ENCRYPTION BY PASSWORD='InsertStrongPasswordHere1')

    and the error is the following:
    Msg 15151, Level 16, State 1, Line 26
    Cannot find the certificate 'TDE_Cert', because it does not exist or you do not have permission.

  • August 16, 2017 at 3:37 am

    #1955409

    crazy_new - Wednesday, August 16, 2017 3:35 AM

    Hi Guys,

    I am trying to backup a certificate that I created for TDE but I am not successful. Please see my scrip below and also the error message:
    BACKUP CERTIFICATE TDE_Cert
    TO FILE = 'C:\SQL Server\AdventureWorks Certificate'
    WITH PRIVATE KEY (file='C:\SQL Server\AdventureWorks Certificate\TDE_CertKey.pvk',
    ENCRYPTION BY PASSWORD='InsertStrongPasswordHere1')

    and the error is the following:
    Msg 15151, Level 16, State 1, Line 26
    Cannot find the certificate 'TDE_Cert', because it does not exist or you do not have permission.

    Is the location of the certificate correct and what permissions do you have on the server?

    Thanks

  • August 16, 2017 at 3:40 am

    #1955411

    NorthernSoul - Wednesday, August 16, 2017 3:37 AM

    crazy_new - Wednesday, August 16, 2017 3:35 AM

    Hi Guys,

    I am trying to backup a certificate that I created for TDE but I am not successful. Please see my scrip below and also the error message:
    BACKUP CERTIFICATE TDE_Cert
    TO FILE = 'C:\SQL Server\AdventureWorks Certificate'
    WITH PRIVATE KEY (file='C:\SQL Server\AdventureWorks Certificate\TDE_CertKey.pvk',
    ENCRYPTION BY PASSWORD='InsertStrongPasswordHere1')

    and the error is the following:
    Msg 15151, Level 16, State 1, Line 26
    Cannot find the certificate 'TDE_Cert', because it does not exist or you do not have permission.

    Is the location of the certificate correct and what permissions do you have on the server?

    Thanks

    Sorry, I meant path of the private key.

  • August 16, 2017 at 3:51 am

    #1955419

    Hi This is on my local, I am just playing around to see how it works. I have now idea where the private key is, that I what I suspecting the issue to be. I ran the followong to create the private key:

    USE AdventureWorks2014
    GO
    CREATE DATABASE ENCRYPTION KEY
    WITH ALGORITHM = AES_256
    ENCRYPTION BY SERVER CERTIFICATE TDE_Cert;
    GO

  • August 16, 2017 at 4:44 am

    #1955430

    crazy_new - Wednesday, August 16, 2017 3:51 AM

    Hi This is on my local, I am just playing around to see how it works. I have now idea where the private key is, that I what I suspecting the issue to be. I ran the followong to create the private key:

    USE AdventureWorks2014
    GO
    CREATE DATABASE ENCRYPTION KEY
    WITH ALGORITHM = AES_256
    ENCRYPTION BY SERVER CERTIFICATE TDE_Cert;
    GO

    I think you've answered your own question. Find where the private key is.

    Thanks

  • August 16, 2017 at 5:59 am

    #1955452

    So any idea what the default path might be?

  • August 16, 2017 at 6:04 am

    #1955454

    crazy_new - Wednesday, August 16, 2017 5:59 AM

    So any idea what the default path might be?

    I believe the default path is the data folder so check in there.

    Thanks

  • August 16, 2017 at 6:12 am

    #1955456

    That is the first place I tried, but no luck. There is only an AgentSigningCertificate. The strange thing is if I search my localhost for a .pvk (for my private key) and .cer (for my certificate), no data is returned.

  • August 16, 2017 at 9:42 am

    #1955523

    Is the database instance on your localhost?

  • August 16, 2017 at 1:58 pm

    #1955567

    Are you in master when trying to backup your TDE cert? The cert protecting the DEKs in TDE live in master, this is the only option and by design, so if you are trying to backup the TDE cert I would just double-check that you are in master before trying to run the backup command.

    Joie Andrew
    "Since 1982"

  • August 16, 2017 at 10:50 pm

    #1955604

    Thank you sir, that solved it. I was in the user database, as soon as I switched the to master database I could create the backup.

Viewing 11 posts - 1 through 10 (of 10 total)

You must be logged in to reply to this topic. Login to reply