I have to configure Database Master Key and Service Master Key on SQL server 2014 Enterprise, but I am not 100 % sure if I am ready for it. Could you someone help me to correct if any of my following understanding
and procedure are wrong, please?
<My understanding>
-Database Master Key(DMK) is key to encrypt database. If you have multiple databases that you would like to set DMK, you have to create DMKs on each database separately.
-Service Master Key(SMK) is key to encrypt Database Master Key. It is one SMK for one Instance.
-SMK will be automatically created after you create DMK.
-If you create DMK you also need to create certificates of DMK, and also take a backup of DMK and the cert.
-If you need to upgrade SQL Server, or detach your database to attach to other server, you need to drop those DMK and SMK before that, otherwise you will fail upgrade SQL server or attach database with error.
<My procedure>
(1) Create DMK
use <database>;
Create Master Key Encryption by Password = 'Password_of_DMK'
(2) Create certificate of the DMK
use <database>;
Create certificate 'Name_of_Cert' With Subject = 'Subject_Of_Cert'
(3) Backup DMK
use <database>;
Open Master Key
Decryption By Password = 'Password_of_DMK';
Backup Master Key to File = 'Path_Of_Location'
Encryption by Password = 'Password_of_Backup_DMK';
(4) Backup SMK
use master;
Backup Service Master Key to File = 'Path_Of_Location'
Encryption By Password = 'Password_Of_SMK';
I will gratefully appreciate any advice or suggestion. Thank you..