Skip to content

Add Geo-Replicated SQL MI autorotation note #9837

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Jak-MS merged 4 commits into from
Nov 21, 2024
Merged

Add Geo-Replicated SQL MI autorotation note #9837

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
ade85bb
Add note to geo-replicated SQL MI with CMK
Jul 3, 2024
4ba5fb3
Update metadata date
Jul 3, 2024
6c8245b
Update azure-sql/database/transparent-data-encryption-byok-key-rotati…
VanMSFT Jul 11, 2024
8eb748e
Merge branch 'live' into lcalderon-update-sqlmi-georeplicated-autorot…
rwestMSFT Aug 9, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion azure-sql/database/transparent-data-encryption-byok-key-rotation.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ description: Learn how to rotate the Transparent data encryption (TDE) protector
author: GithubMirek
ms.author: mireks
ms.reviewer: wiassaf, vanto, mathoma
ms.date: 01/16/2024
ms.date: 07/03/2024
ms.service: azure-sql
ms.subservice: security
ms.topic: how-to
Expand Down Expand Up @@ -188,6 +188,9 @@ Using the [Azure portal](https://portal.azure.com):

When the key is rotated on the primary server, it's automatically transferred to the secondary server.

> [!NOTE]
> If the same key vault key on the primary server is used as the default TDE protector on the secondary server, ensure **Auto-rotate key** is enabled for **both** servers. Failure to do so may lead to the auto-rotation workflows entering an error state and prevent further manual key rotation operations.

# [PowerShell](#tab/azure-powershell-geo)

The `<keyVaultKeyId>` can be [retrieved from Key Vault](/azure/key-vault/keys/quick-create-portal#retrieve-a-key-from-key-vault).
Expand Down