question

Hi AndreyLau-2325,

I have a question: how to rotate the key without destroying the SQL database? What's the script?

Next is the process to rotate the keys and certificates used for TDE encryption:

1. Create a new SQL TDE certificate;
   

2. Backup the new SQL TDE certificate;
   

3. Create the same SQL TDE certificate;
   

4. Change encryption key for your databases;

More detail steps and codes you can reference : rotate-tde-keys&certificates

And this could be helpful: key-rotation-in-tde, SmartKey

BR,
Mia
If the reply helped, do "Accept Answer" and upvote it.--Mia.

Hi AndreyLau-2325，

Please refence the reply from this case : tde-regenerate-key

BR,
Mia
If the reply helped, please "Accept Answer" and upvote it.--Mia

Btw even if TDE certificate expires it ll still works.