FIX: SQL Server stops responding when you back up the certificate that is used to encrypt the database encryption key in SQL Server 2012 or SQL Server 2014

Applies to: SQL Server 2012 DeveloperSQL Server 2012 EnterpriseSQL Server 2012 Enterprise Core


Microsoft distributes Microsoft SQL Server 2012 fixes as one downloadable file. Because the fixes are cumulative, each new release contains all the hotfixes and security fixes that were included in the previous SQL Server 2012 fix release.

Symptoms


Consider the following scenario:
  • Assume that you set a database to use Transparent Data Encryption (TDE) in an instance of SQL Server 2012 or SQL Server 2014.
  • You back up the certificate that is used to encrypt the database encryption key.
  • One or more operations (for example, operations that require write activity to the Transaction log for the TDE-enabled database) are in progress.
In this scenario, SQL Server might stop responding.

Additionally, you might see sessions that are waiting for a schema stability (Sch-S) lock on the certificate resource. If you can't make new connections to the instance of SQL Server, you can try monitoring the lock information by using the Admin connection.

Resolution


Cumulative Update information

The issue was first fixed in the following cumulative updates for SQL Server: 

Status


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

References


Learn about the terminology that Microsoft uses to describe software updates.