Hi,
As I'm sure your aware, we're required to upgrade to SQL Server 2008 in preperation for Tessitura v11. For us this actually means installing a new server, including adding all the database encryption keys etc. Unfortunatly to do this requires the original database encryption key, and since I inherited this Tessitura installation, I don't have this and can't find it documented anywhere!!!
Is there a process that I can perform to regenerate the database encryption key. I can see in the security application the option to "Regenerate" the database master key, and the documentation seems to imply that I'll be asked to enter a new password. However before I did this I wanted to know if I'm going down the right route, and also if there any other considerations that I should take?
Thanks!
Just adding on to this, does the Regenerate button in the security app execute the following T-SQL (which looks like its what I need)?
use impresario
go
alter master key regenerate with encryption by password = 'password';
Thanks
To answer your first question, yes, the Regenerate button does exactly what you want. It does come with a warning, however, that the operation may take some time, depending on how much re-encryption is required.
And yes, it does execute the ALTER MASTER KEY statement; however, to do so, it must first also execute a statement to open the very key for which you currently have no password, so doing so outside of the Security application won't be possible. Security uses an alternative means to open the master key to perform the alteration.
Hope this helps.
Hi Steven,
Thanks for the information. I was aware it would probably take awhile to accomplish, but at least now I know I'm following the right process.
There is also a good document that talks you through the steps: http://www.tessituranetwork.com/~/media/Documentation/Security/Tessitura_PA-DSS_Implementation_Guide.ashx
beginning on page 7 - it has reminders like remembering to shut everything down, close all batches first, etc.
Good luck!