Azure SQL Database
An Azure relational database service.
6,302 questions
Unable to encrypt SQL Server TDE with CMK
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 67%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETS%3C/text%3E%3C/svg%3E)
Tariq Salat
101
Reputation points
I have created a SQL Server via REST API Method and trying to encrypt TDE with CMK. However, I am unable to encrypt server with CMK. I have to manually go to server and encrypt with CMK first and save and then again encrypt it with Service-managed encryption and save. After that when I try to update encryption via REST API then it works but not at the first time when new server is created.
Can anyone please help me with this.
Azure SQL Database
{count} votes
-
Erland Sommarskog 121.3K Reputation points MVP Volunteer Moderator2021-08-26T21:21:58.687+00:00 Am I right to assume that you are talking about Azure SQL Database? If so, you should probably change the tag accordingly.
It might also help if you include the code you are using.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(297.6, 97%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
Anurag Sharma 17,631 Reputation points2021-08-27T08:34:12.1+00:00 Hi @Tariq Salat , Welcome to Microsoft Q&A forum.
Can you please provide the APIs you are using to achieve the task assuming this is Azure SQL?
-
Tariq Salat 101 Reputation points
2021-08-27T09:05:38.077+00:00 Hi, I am creating AZURE SQL Server
-
Tariq Salat 101 Reputation points
2021-08-27T09:09:50.513+00:00 Hi @AnuragSharma-MSFT, please find below APIs in detail
- To create Azure SQL Server I am using 'PUT https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Sql/servers/{serverName}?api-version=2021-02-01-preview' API. SQL Server got created successfully using this API with default Service Managed encryption.
- Now I need to update the encryption of above sql server to CMK encryption. To achieve this I am using 'PUT https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Sql/servers/{serverName}/encryptionProtector/current?api-version=2021-02-01-preview' API.
Now, the problem is that using second API the encryption is not getting updated.
Need your help on this please.
-
Tariq Salat 101 Reputation points
2021-08-30T04:50:31.93+00:00 @AnuragSharma-MSFT any updates please. I am a bit stuck.
-
Anurag Sharma 17,631 Reputation points
2021-08-30T05:39:00.07+00:00 Thanks for your reply. Could you please tell us if you have already created a key in key vault and passing the values through rest api calls as below:
Microsoft.Sql servers/encryptionProtector 2021-02-01-preview
-
Tariq Salat 101 Reputation points
2021-08-30T06:33:48.82+00:00 Hi @AnuragSharma-MSFT ,
Yes i have already created a key in key vault and passing those required values via encryption api. Still it is not working. -
Tariq Salat 101 Reputation points
2021-08-30T13:15:08.53+00:00 @AnuragSharma-MSFT you got a chance to check this?
-
Erland Sommarskog 121.3K Reputation points MVP Volunteer Moderator
2021-08-30T20:54:28.413+00:00 If you want Microsoft staff to check the settings in your Azure account, you will need to open a support case, so that you can share the name of your server and other details which are recommendable to publish in a public forum.
Sign in to comment
Sign in to answer