Migrate SQL server to TDE encrypted location

Step-by-step guide

1. Set up TDE
2. Install TDE client
3. Create a smartpoint to the database location on disk
   1. The SQL Smartpoint must allow these apps encrypt/decrypt permission. Other applications may be necessary depending on the environment.
      1. C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlsrvr.exe
      2. C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlagent.exe
      3. C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\ReportingServicesService.exe
      4. C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\msmdsrv.exe
      5. C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\AccessToSql.exe
      6. C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\DatabaseMail.exe
      7. C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\SQLMaint.exe
4. Move a MS SQL database to a new location. To move a SQL server database, the database must be detached, then the files must be moved to a new location and then the database can be attached again.

   1. Change the file locations with an ALTER DATABASE command:

      SQL

      USE master; --do this all from the master
      ALTER DATABASE foo
      MODIFY FILE (name='DB_Data1'
                   ,filename='X:\NewDBFile\DB_Data1.mdf'); --Filename is new location

      

      Note

      Changes to the path do take effect immediately but will be applied the next time the database starts.

   2. Take the database offline. Using WITH ROLLBACK IMMEDIATE will disconnect all users and roll back all currently open transactions:

      SQL

      ALTER DATABASE foo SET OFFLINE WITH ROLLBACK IMMEDIATE;

   3. Copy the files to the new location using your

      CODE

      COPY C:\sqlfiles\DB_Data1.mdf X:\NewDBFile\DB_Data1.mdf

      

      Do not use any “Move” functions to copy the database files to their new location or transparent disk encryption will not be applied.

   4. Bring the database online.

      SQL

      ALTER DATABASE foo SET ONLINE;