Skip to content

Commit f7936b1

Browse files
authored
Update replication-security-best-practices.md
Based on chat with Sasa Popovic
1 parent d1f10d2 commit f7936b1

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

docs/relational-databases/replication/security/replication-security-best-practices.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -63,12 +63,15 @@ helpviewer_keywords:
6363

6464
## Improve security posture with database master key
6565

66+
> [!NOTE]
67+
> The instructions in this section are currently applicable to SQL Server 2022 CU18 and later, and SQL Server 2019 CU31 and later. These instructions are not applicable to Azure SQL Managed Instance.
68+
6669
When using SQL Server authentication for replication, secrets that you provide when you configure replication are stored within SQL Server — specifically, in the distribution database and, for pull subscriptions, also in the subscriber database.
6770

6871
To enhance the security posture for replication, **before you *start* to configure replication**:
6972

7073
- Create a [database master key (DMK)](../../../t-sql/statements/create-master-key-transact-sql.md) in the distribution database of the server that hosts the Distributor.
71-
- For *pull subscriptions*, also create a DMK in the subscriber database.
74+
- For *pull subscriptions*, also create a DMK in the subscriber database.
7275

7376
If replication was created before the DMK, first create the DMK, and then update replication secrets by updating passwords for replication jobs. You can update the job with the same password, or you can use a new password.
7477

@@ -79,7 +82,6 @@ To update replication secrets, use one of the following relevant stored procedur
7982
- [sp_changedistpublisher](../../system-stored-procedures/sp-changedistpublisher-transact-sql.md)
8083
- [sp_changepublication_snapshot](../../system-stored-procedures/sp-changepublication-snapshot-transact-sql.md)
8184

82-
8385
Configuring transactional replication without a DMK can result in SQL Server warning `14130` on:
8486

8587
- Azure SQL Managed Instance

0 commit comments

Comments
 (0)