How to renew the encryption certificate in SQL Server 2016?

I have implemented SQL Symmetric key encryption by using the below scripts in SQL Server 2016.

CREATE MASTER KEY ENCRYPTION BY
PASSWORD = 'xxxxxxxxx'
GO

CREATE CERTIFICATE EmpEncryptionCertificate
WITH SUBJECT = 'Column-level encryption certificate',
EXPIRY_DATE = '20191231';
GO

CREATE SYMMETRIC KEY EmpSymmetricKey
WITH ALGORITHM = AES_256
ENCRYPTION BY CERTIFICATE EmpEncryptionCertificate
GO

Article used for reference:

https://www.c-sharpcorner.com/article/implement-column-level-encryption-decryption-in-sql-server-2016/

I have kept the expiry date for the certificate as 20191231. Can we renew this certificate with a new expiry date? If yes, how to renew this certificate during the expiry period?

If not, what needs to be done ?

Will the encryption work even if the certificate is not renewed?

Thanks in advance.

2 Replies

Know the answer? Post it — somebody with the same question will find it here.

Sri Ram8y ago
Hi Bryian, Thanks for your suggestion.
What is the correct way of updating the existing certificate?

Is it to create new certificate or is it possible to renew the existing certificate?
0
Bryian Tan8y ago
Why not replace it with a new certificate?

https://www.mssqltips.com/sqlservertip/5009/updating-an-expired-sql-server-tde-certificate/
+1