You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/relational-databases/security/encryption/troubleshoot-tde.md
+28-44Lines changed: 28 additions & 44 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -159,7 +159,10 @@ Confirm that the server has permissions to the key vault and the correct permiss
159
159
160
160
## Getting TDE status from the Activity log
161
161
162
-
To allow for monitoring of the database status due to Azure Key Vault key access issues, the following events will be logged to the [Activity Log](/azure/service-health/alerts-activity-log-service-notifications) for the resource ID based on the Azure Resource Manager URL and Subscription+ResourceGroup+ServerName+DatabaseName:
162
+
To allow for monitoring of the database status due to Azure Key Vault key access issues, the following events will be logged to the [Activity Log](/azure/service-health/alerts-activity-log-service-notifications) for the resource ID based on the Azure Resource Manager URL.
163
+
164
+
> [!NOTE]
165
+
> Events may take at least 15-30 mins to appear in the Activity Log from the time key vault access issue occurs.
163
166
164
167
**Event when the service loses access to the Azure Key Vault key**
Description: Database has lost access to Azure key vault key and is now inaccessible.
175
+
Description: Database {database_name} on Server {server_name} has lost access to Azure Key Vault Key and is now transitioning to inaccessible state.
173
176
174
177
**Azure SQL Managed Instance**
175
178
176
-
EventName: MakeManagedDbInaccessible
179
+
EventName: MakeManagedDatabaseInaccessible
177
180
178
181
Status: Started
179
182
180
-
Description: Database on managed server has lost access to Azure Key Vault Key and is now transitioning to inaccessible state.
181
-
182
-
183
-
**Event when the database has automatically come back online**
184
-
185
-
**Azure SQL Database**
186
-
187
-
EventName: MakeDatabaseAccessible
188
-
189
-
Status: Succeeded
190
-
191
-
Description: Database access to Azure key vault key has been reestablished and database is now online.
192
-
193
-
**Azure SQL Managed Instance**
194
-
195
-
EventName: MakeManagedDbAccessible
183
+
Description: Database { database_name} on managed server {server_name} has lost access to Azure Key Vault Key and is now transitioning to inaccessible state.
196
184
197
-
Status: Succeeded
198
185
199
-
Description: Access to Azure Key Vault Key has been re-established and all managed databases in server is now online.
200
-
201
-
202
186
**Event when the issue wasn’t resolved within 30 minutes and Azure Key Vault key access has to be validated manually**
203
187
204
188
**Azure SQL Database**
@@ -211,49 +195,49 @@ Description: Database is inaccessible and requires user to resolve Azure key vau
211
195
212
196
**Azure SQL Managed Instance**
213
197
214
-
EventName: MakeManagedDbInaccessible
198
+
EventName: MakeManagedDatabaseInaccessible
215
199
216
200
Status: Succeeded
217
201
218
-
Description: Database on managed server is inaccessible and requires user to re-establish access to Azure Key Vault Key.
219
-
220
-
221
-
**Event when db comes online after manual key re-validation**
202
+
Description: Database { database_name} on managed server {server_name} is inaccessible and requires user to re-establish access to Azure Key Vault Key.
203
+
204
+
205
+
**Event when re-validation of Azure Key Vault key access has succeeded and the db is coming back online**
222
206
223
207
**Azure SQL Database**
224
208
225
209
EventName: MakeDatabaseAccessible
226
210
227
-
Status: Succeeded
211
+
Status: Started
228
212
229
-
Description: Database access to Azure key vault key has been reestablished and database is now online.
213
+
Description: Access to Azure Key Vault Key has been re-established, operation to make database {database_name} on server {server_name} accessible started.
230
214
231
215
**Azure SQL Managed Instance**
232
216
233
-
EventName: MakeManagedDbAccessible
217
+
EventName: MakeManagedDatabaseAccessible
234
218
235
-
Status: Succeeded
219
+
Status: Started
236
220
237
-
Description: Access to Azure Key Vault Key has been re-established and all managed databases in server is now online.
238
-
221
+
Description: Access to Azure Key Vault Key has been re-established, operation to make database {database_name} on managed server {server_name} accessible started.
239
222
240
-
**Event when re-validation of Azure Key Vault key access has succeeded and the db is coming back online**
223
+
224
+
**Event when the database has successfully come back online**
241
225
242
226
**Azure SQL Database**
243
227
244
-
EventName: MakeDatabaseAccessible
228
+
EventName: MakeDatabaseAccessible
245
229
246
-
Status: Started
230
+
Status: Succeeded
247
231
248
-
Description: Restoring database access to Azure key vault key has started.
232
+
Description: Access to Azure Key Vault Key has been re-established and database {database_name} on server {server_name} is now online.
249
233
250
234
**Azure SQL Managed Instance**
251
235
252
-
EventName: MakeManagedDbAccessible
236
+
EventName: MakeManagedDatabaseAccessible
253
237
254
-
Status: Started
238
+
Status: Succeeded
255
239
256
-
Description: Access to Azure Key Vault Key has been re-established, operation to make all databases accessible in managed server started
240
+
Description: Access to Azure Key Vault Key has been re-established and database {database_name} on managed server {server_name} is now online.
257
241
258
242
259
243
**Event when re-validation of Azure Key Vault key access has failed**
Description: Restoring database access to Azure key vault key has failed.
251
+
Description: Access to Azure Key Vault Key has been re-established, operation to make database {database_name} accessible on server {server_name} failed
268
252
269
253
**Azure SQL Managed Instance**
270
254
271
-
EventName: MakeManagedDbAccessible
255
+
EventName: MakeManagedDatabaseAccessible
272
256
273
257
Status: Failed
274
258
275
-
Description: Restoring database access to Azure key vault key has failed.
259
+
Description: Access to Azure Key Vault Key has been re-established, operation to make database {database_name} accessible on managed server {server_name} failed
0 commit comments