KB4058175 - FIX: TDE-enabled backup and restore are slow if the encryption key is stored in an EKM provider in SQL Server

Applies To

SQL Server 2016 Service Pack 1 SQL Server 2016 Developer - duplicate (do not use) SQL Server 2016 Enterprise - duplicate (do not use) SQL Server 2016 Enterprise Core - duplicate (do not use) SQL Server 2016 Standard - duplicate (do not use) SQL Server 2014 Service Pack 2 - duplicate (do not use) SQL Server 2014 Developer - duplicate (do not use) SQL Server 2014 Enterprise - duplicate (do not use) SQL Server 2014 Enterprise Core - duplicate (do not use) SQL Server 2014 Standard - duplicate (do not use) SQL Server 2017 Developer SQL Server 2017 Enterprise SQL Server 2017 Enterprise Core

Symptoms

Assume that you use Transparent Data Encryption (TDE) together with Extensible Key Management (EKM) in Microsoft SQL Server 2017, 2016 and 2014. You may notice that database backup and restore operations are slow if the encryption key for a TDE-enabled database is stored in the EKM provider.

Resolution

This problem is fixed in the following updates for SQL Server:

Cumulative Update 8 for SQL Server 2017

Cumulative Update 1 for SQL Server 2016 Service Pack 2

Cumulative Update 9 for SQL Server 2016 Service Pack 1

Cumulative Update 12 for SQL Server 2014 SP2

About SQL Server builds

Each new build for SQL Server contains all the hotfixes and security fixes that were in the previous build. We recommend that you install the latest update for your version of SQL Server:

Latest cumulative update for SQL Server 2017

The latest build for SQL Server 2016

Latest cumulative update for SQL Server 2014

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

References

Learn about the terminology that Microsoft uses to describe software updates.