Re: Two certificates sharing the same symmetric key

Thanks for your clarification. For some reason, it works on the second time.



"Laurentiu Cristofor [MSFT]" wrote:

You CAN encrypt a symmetric key using two certificates. If you do that, you
CAN open the key using either certificate.

If you cannot decrypt sym1 using cert2, the problem most likely is in how
you added the cert2 encryption.

Can you post the TSQL code that you have used to create and encrypt sym1
with cert1 and cert2?

Thanks

--
Laurentiu Cristofor [MSFT]
Software Development Engineer
SQL Server Engine
http://blogs.msdn.com/lcris/

This posting is provided "AS IS" with no warranties, and confers no rights.

"Brian Ho" <BrianHo@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:4FFCCC9E-5258-4492-9D89-8FDD0D40E7DC@xxxxxxxxxxxxxxxx
Can we have two certificates share the same symmetric key?

We use sym1 key encrypted by cert1 to encrypt the column. We then add
cert2
to sym1. We want to use cert2 to open sym1 but failed with "The key is
not
encrypted using the specified decryptor" error.

Does it mean only cert1 can open sym1 key to decrypt the column since the
column was encrypted by cert1?



.