rebuilding master database in sql server

Master key, and then encrypts them with the service master key loaded Keys and secrets that have been encrypted with the current service When the service master key is restored, SQL Server decrypts all the So assume the target sql server will use a new service account (same domain). And assuming the target computer has a new name (no access to previous sql server computer principal) and we don't have any record of the source sql server service's domain service account. This question is assuming I have the backup of the source server's SMK.

So without restoring the SMK, the encrypted elements (example: linked server) will fail to work if the new machine doesn't use the same sql server service account. This is because the SMK can only be decrypted/opened by same Computer name principal or domain service account. When rebuilding a sql server using a fresh installation, usually the process is to restore the system dbs, followed by user dbs.īut SMK can only be decrypted by the new machine if the new machine uses the same sql server service domain credentials. Linked server, credentials, database master key (if any) are encrypted using the service master key. Service Master key is at top of sql server encryption hierarchy.

Rebuilding master database in sql server