FIX: TDE database goes offline during log flush if you lose connection to the EKM provider in SQL Server

Applies to: SQL Server 2016 DeveloperSQL Server 2016 EnterpriseSQL Server 2016 Enterprise Core More


Assume that you use Transparent Data Encryption (TDE) together with Extensible Key Management (EKM) in Microsoft SQL Server. The encryption key for a TDE-enabled database is stored in the EKM provider. If connectivity issues occur during a log flush operation, the EKM provider becomes inaccessible and the database goes offline. Additionally, a dump file is generated.


The fix for this problem is included in the following updates for SQL Server:

Cumulative Update 1 for SQL Server 2016 Service Pack 2

Cumulative Update 9 for SQL Server 2016 Service Pack 1

Cumulative Update 12 for SQL Server 2014 Service Pack 2



Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.


Learn about the terminology Microsoft uses to describe software updates.