Skip to content

Commit 770ffe4

Browse files
Merge pull request #251377 from MikeRayMSFT/docs-editor/configure-transparent-data-enc-1694647641
Remove note about TDE
2 parents 91755cc + ceeb639 commit 770ffe4

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

articles/azure-arc/data/configure-transparent-data-encryption-sql-managed-instance.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -69,9 +69,6 @@ In customer-managed mode, TDE uses a service-managed database master key and use
6969
1. Create a certificate.
7070
1. Store the certificate as a secret in the same Kubernetes namespace as the instance.
7171

72-
> [!NOTE]
73-
> If you need to change from one mode to the other, you must disable TDE from the current mode before you apply the new mode. To disable, before you proceed, follow the instructions at [Turn off TDE on the managed instance](#turn-off-tde-on-the-managed-instance).
74-
7572
### Enable
7673

7774
# [Service-managed](#tab/service-managed)
@@ -162,6 +159,7 @@ To enable TDE in customer-managed mode:
162159
kubectl patch sqlmi sqlmi-tde --namespace arc --type merge --patch '{ "spec": { "security": { "transparentDataEncryption": { "mode": "CustomerManaged", "protectorSecret": "sqlmi-tde-protector-cert-secret" } } } }'
163160
```
164161

162+
165163
---
166164

167165
## Turn off TDE on the managed instance
@@ -194,6 +192,7 @@ Example:
194192
kubectl patch sqlmi sqlmi-tde --namespace arc --type merge --patch '{ "spec": { "security": { "transparentDataEncryption": { "mode": "Disabled" } } } }'
195193
```
196194

195+
197196
---
198197

199198
## Back up a TDE credential
@@ -297,6 +296,7 @@ When you back up credentials from the managed instance, the credentials are stor
297296
Similar to above, to restore the credentials, copy them into the container and run the corresponding T-SQL afterwards.
298297

299298

299+
300300
> [!NOTE]
301301
> If the `kubectl cp` command is run from Windows, the command may fail when using absolute Windows paths. Use relative paths or the commands specified below.
302302
> To restore database backups that have been taken before enabling TDE, you would need to disable TDE on the SQL Managed Instance, restore the database backup and enable TDE again.
@@ -395,3 +395,4 @@ Similar to above, to restore the credentials, copy them into the container and r
395395
## Next steps
396396

397397
[Transparent data encryption](/sql/relational-databases/security/encryption/transparent-data-encryption)
398+

0 commit comments

Comments
 (0)