sp-pdw-database-encryption-regenerate-system-keys-sql-data-warehouse.md

title	sp_pdw_database_encryption_regenerate_system_keys (Azure Synapse Analytics)
description	Use **sp_pdw_database_encryption_regenerate_system_keys** to rotate the certificate and database encryption key for internal databases that are encrypted when TDE is enabled on the appliance.
ms.custom
ms.date	03/03/2017
ms.prod	sql
ms.prod_service	synapse-analytics, pdw
ms.technology	system-objects
ms.topic	reference
dev_langs	TSQL
ms.assetid	bb13e323-a984-4462-8b6d-6019c38ddd9d
author	WilliamDAssafMSFT
ms.author	wiassaf
ms.reviewer
monikerRange	>= aps-pdw-2016 || = azure-sqldw-latest

sp_pdw_database_encryption_regenerate_system_keys (Azure Synapse Analytics)

[!INCLUDEapplies-to-version/asa-pdw]

Use sp_pdw_database_encryption_regenerate_system_keys to rotate the certificate and database encryption key for internal databases that are encrypted when TDE is enabled on the appliance. This includes tempdb. This will succeed only if TDE is enabled.

Syntax

-- Syntax for Azure Synapse Analytics and Parallel Data Warehouse  
  
sp_pdw_database_encryption_regenerate_system_keys  ;  

Note

[!INCLUDEsynapse-analytics-od-unsupported-syntax]

Return Code Values

0 (success) or 1 (failure)

Remarks

The procedure has no parameters.

This procedure should be used when the traffic in the appliance is low.

Permissions

Requires membership in the sysadmin fixed database role, or CONTROL SERVER permission.

Example

The following example regenerates the database encryption keys.

EXEC sys.sp_pdw_database_encryption_regenerate_system_keys;  

See also

sp_pdw_database_encryption (Azure Synapse Analytics)
sp_pdw_log_user_data_masking (Azure Synapse Analytics)