Re: Encrypted database deployment

Did you back up all your Service Master Keys and Database Master Keys, like
BOL suggests? If so, you might see if you can successfully restore them
without the FORCE option.

"Gerhard" <acsla@xxxxxxxxxxxxxxxx> wrote in message
news:7D9F7228-93F7-48E9-B776-2E90EDB54C0F@xxxxxxxxxxxxxxxx
I'm also getting the same error now on another database that was working
in
this new environment, even when I restore a backup...

Msg 15466, Level 16, State 1, Line 1
An error occurred during decryption.



"Roger Wolter[MSFT]" wrote:

There's more information on OPEN here:
http://msdn2.microsoft.com/en-us/library/ms174433.aspx


--
This posting is provided "AS IS" with no warranties, and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

"Roger Wolter[MSFT]" <rwolter@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:evRJycVxGHA.3892@xxxxxxxxxxxxxxxxxxxxxxx
Did you run a CREATE MASTER KEY in this database before trying the OPEN
operation? If so, you just opened the new key you created - not the
key
the symmetric keys were encrypted with. You may have to go back to
your
backup that contains the original key.

--
This posting is provided "AS IS" with no warranties, and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

"Gerhard" <acsla@xxxxxxxxxxxxxxxx> wrote in message
news:54EF76EA-F4ED-44CD-BB7C-3EC017139AAD@xxxxxxxxxxxxxxxx
Thanks. I did still have the password, so ran the below which ran
without
error.

However, I still get:

Msg 15466, Level 16, State 1, Line 1
An error occurred during decryption.

when I try to open a symmetric key.

Can you help?

Thanks.

"Roger Wolter[MSFT]" wrote:

This issue is that the password is used to encrypt the database
master
key -
it isn't the database master key so you now have two different master
keys
encrypted with the same password which doesn't help you a lot. If
you
haven't already blown away the master key, you can re-encrypt it with
the
new service master key like this:

OPEN MASTER KEY DECRYPTION BY PASSWORD = 'password'

ALTER MASTER KEY ADD ENCRYPTION BY SERVICE MASTER KEY



--
This posting is provided "AS IS" with no warranties, and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

"Gerhard" <acsla@xxxxxxxxxxxxxxxx> wrote in message
news:0F2B0D28-2A97-4E60-B6B8-1F821177CA87@xxxxxxxxxxxxxxxx
I have an encrypeted database that I need to move from one
development
environment to another. If I back it up and restore it to the new
environment, I get decryption errors, even though the Master Keys
have
been
created using the same password CREATE MASTER KEY ENCRYPTION BY
PASSWORD =
...

How can I move the database to the new environment?

Thanks.










.

Relevant Pages

  • Re: Help needed !
    ... Alright, that means we don't need to re-create master key, Certificate and ... You have to backup/restore the database master key and restore that ...
    (microsoft.public.sqlserver.clients)
  • Re: An error occurred during decryption
    ... To confirm that the error happens with the service master key, ... ALTER SERVICE MASTER KEY REGENERATE. ... server login passwords, ...
    (microsoft.public.sqlserver.security)
  • RE: Managing SQL Encryption -- Is there a Best Practice Doc?
    ... You can search the internet for encryption best ... The Service Master Key is created when the instance of SQL Server is ... How can you track Database Master Keys... ...
    (microsoft.public.sqlserver.security)
  • Re: Master Key Issue
    ... a database's master key is encrypted using the server's service master key. ... Because you moved the database to a new server, but didn't also move the service master key, the database master key can now not be decrypted automatically when you use the symmetric key. ...
    (microsoft.public.sqlserver.security)
  • Re: Encrypted database deployment
    ... Check that the service master key is valid: ... An error occurred during decryption. ... ALTER MASTER KEY ADD ENCRYPTION BY SERVICE MASTER KEY ...
    (microsoft.public.sqlserver.security)