I am trying to find Microsoft documentation for this lack of advantage (in terms of encryption, notwithstanding the EKM benefits). I have been wrestling with getting a trusted certificate into...

BTW, I found another "gotcha". After turning off encryption stats off for the only encrypted database on the instance, encryption_state was still 1, and tempdb was showing up as encrypted....

Still working on the issue. Had no trouble generating a self signed cert.

Do you know if there's any specific requirements for the certificate properties (other than binary der with encrypted...

Thank you very much for your quick responses. I very specifically requested this cert with no reference in the CN to the server name, as I was under the impression...

Thank you very much for your rapid response.

I've been living on that page for quite a while. I'm using this example from that page:

CREATE CERTIFICATE Shipping11 FROM FILE = 'c:\Shipping\Certs\Shipping11.cer'...

(duplicate post)

• This reply was modified 1 year, 3 months ago by  William McQuinn. Reason: duplicate post

Sorry to comment on such an old post, but this article has had the most pertinent information concerning TDE with an external certificate.

I have been trying for weeks to use...

Apologies in advance for posting to a two year old topic, but I just went through the same rigamarole, and couldn't find the "right" place to change the impersonation mode....

From the article:

I’m gradually coming to the conclusion that software engineering is an idea whose time has come and gone. I still believe it makes excellent sense to engineer software....

Doesn't seem to care for ntext either, even though I can see you're testing for ntext in your script.

"Msg 206, Level 16, State 2, Line 2

Operand type clash: int is...