FIX: TDE-enabled backup and restore are slow if the encryption key is stored in an EKM provider in SQL Server

Applies to: Microsoft SQL Server 2016 Service Pack 1SQL Server 2016 DeveloperSQL Server 2016 Enterprise More

Symptoms


Assume that you use Transparent Data Encryption (TDE) together with Extensible Key Management (EKM) in Microsoft SQL Server 2017, 2016 and 2014. You may notice that database backup and restore operations are slow if the encryption key for a TDE-enabled database is stored in the EKM provider.

Resolution


This problem is fixed in the following updates for SQL Server:

Cumulative Update 8 for SQL Server 2017

Cumulative Update 1 for SQL Server 2016 Service Pack 2

Cumulative Update 9 for SQL Server 2016 Service Pack 1

Cumulative Update 12 for SQL Server 2014 SP2

Status


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

References


Learn about the terminology that Microsoft uses to describe software updates.