| title | sp_pdw_database_encryption_regenerate_system_keys (Azure Synapse Analytics) | |
|---|---|---|
| description | Use sp_pdw_database_encryption_regenerate_system_keys to rotate the certificate and database encryption key for internal databases that are encrypted when TDE is enabled on the appliance. | |
| author | WilliamDAssafMSFT | |
| ms.author | wiassaf | |
| ms.reviewer | randolphwest | |
| ms.date | 06/23/2025 | |
| ms.service | sql | |
| ms.subservice | system-objects | |
| ms.topic | reference | |
| dev_langs |
|
|
| monikerRange | >=aps-pdw-2016 || =azure-sqldw-latest |
[!INCLUDE applies-to-version/asa-pdw]
Use sp_pdw_database_encryption_regenerate_system_keys to rotate the certificate and database encryption key for internal databases that are encrypted when TDE is enabled on the appliance. This includes tempdb. This will succeed only if TDE is enabled.
Syntax for Azure Synapse Analytics and Analytics Platform System (PDW).
sp_pdw_database_encryption_regenerate_system_keys
[ ; ]
Note
[!INCLUDE synapse-analytics-od-unsupported-syntax]
0 (success) or 1 (failure).
The procedure has no parameters.
This procedure should be used when the traffic in the appliance is low.
Requires membership in the sysadmin fixed database role, or CONTROL SERVER permission.
The following example regenerates the database encryption keys.
EXECUTE sys.sp_pdw_database_encryption_regenerate_system_keys;