Because this master key isn't encrypted by the service master key, a password must be specified when it's opened. The following example creates a backup of the AdventureWorks2012 master key to a file. Requires CONTROL permission on the database. To back up the database master key to an Azure Blob storage, the following prerequisites apply:Ĭreate stored access policy and shared access storage.Ĭreate a SQL Server credential using a shared access signature.įor more information, see Tutorial: Use Azure Blob Storage with SQL Server. Authenticate to Azure Blob storageĪpplies to: SQL Server 2022 (16.x) and later.
But if the master key is encrypted only with a password, it must be explicitly opened.īack up the master key as soon as it's created, and store the backup in a secure, off-site location. If it's encrypted with the service master key, the master key doesn't have to be explicitly opened. The master key must be open and, therefore, decrypted before it's backed up. For more information, see Password Policy.
This password is subject to complexity checks. Is the password used to encrypt the master key in the file. Is the URL for your Azure Blob storage, in the format similar to ENCRYPTION BY PASSWORD =' password' The path may be a local path or a UNC path to a network location.Īpplies to: SQL Server 2022 (16.x) and later Specifies the complete path, including file name, to the file to which the master key will be exported.
To view Transact-SQL syntax for SQL Server 2014 and earlier, see Previous versions documentation.
0 kommentar(er)
