Forum Discussion
Encrypted backups using Asymmetric key
Hello,
I am creating asymmetric keys at the master level and at the database level.
Asymmetric keys are showing in the security option, but when I am trying to take encrypted backup using asymmetric keys no keys are visible.
I have already created an encrypted backup by using certificates, now I am trying to create an encrypted backup using an asymmetric key.
Hi Ayushtz --
Apologies, I missed that you had already performed the encryption using certificates. At any rate, I didn't see it mentioned, but did you implement an EKM? Using an asymmetric key to perform backup encryption is only supported when an EKM is configured for SQL Server. SQL Server does not provide EKM capabilities. Take care.
4 Replies
- bake13 is correct, when using Asymmetric keys you must use an EKM like Azure Key Vault or another one that supports SQL Server. You can create an Asymmetric key in SQL Server, but if it is not managed in an EKM, it cannot be used to do Encrypted Backups.
- I have already done the task with certificates, now I am using asymmetric keys to create an encrypted backup but the keys are not visible in the "asymmetric key" option.
This doc is only for certificates.
bake13Microsoft
Hi Ayushtz --
Apologies, I missed that you had already performed the encryption using certificates. At any rate, I didn't see it mentioned, but did you implement an EKM? Using an asymmetric key to perform backup encryption is only supported when an EKM is configured for SQL Server. SQL Server does not provide EKM capabilities. Take care.
