FIX: Restore or Restore Verifyonly of a TDE-compressed backup fails with error 33111 and 3013 in SQL Server 2016 and 2017

Applies to: SQL Server 2017 Developer on WindowsSQL Server 2017 Enterprise on WindowsSQL Server 2017 Enterprise Core on Windows More

Symptoms


Assume that you enable Transparent Data Encryption (TDE) for a database in SQL Server 2016 and 2017. You back up the database by using a BACKUP DATABASE Transact-SQL statement that has the COMPRESSION and MAXTRANSFERSIZE options specified. If MAXTRANSFERSIZE is greater than 64KB and the log that has inactive Virtual Log File (VLF) is encrypted with the old key, the Restore or Restore Verifyonly operation of the backup may be unsuccessful, and you will receive the following error messages:

Msg 33111, Level 16, State 3, Line LineNumber

Cannot find server certificate with thumbprint 'thumbprint'.

Msg 3013, Level 16, State 1, Line LineNumber

VERIFY DATABASE is terminating abnormally.

Status


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section. 

Resolution


This issue is fixed in the following cumulative updates for SQL Server:

About cumulative updates for SQL Server:
Each new cumulative update for SQL Server contains all the hotfixes and all the security fixes that were included with the previous cumulative update. Check out the latest cumulative updates for SQL Server:

References


Learn about the terminology that Microsoft uses to describe software updates.