Symptoms
Assume that you enable Transparent Data Encryption (TDE) for a database in SQL Server 2016 and 2017. You back up the database by using a BACKUP DATABASE Transact-SQL statement that has the COMPRESSION and MAXTRANSFERSIZE options specified. If MAXTRANSFERSIZE is greater than 64KB and the log that has inactive Virtual Log File (VLF) is encrypted with the old key, the Restore or Restore Verifyonly operation of the backup may be unsuccessful, and you will receive the following error messages:
Msg 33111, Level 16, State 3, Line LineNumber
Cannot find server certificate with thumbprint 'thumbprint'.
Msg 3013, Level 16, State 1, Line LineNumber
VERIFY DATABASE is terminating abnormally.
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Resolution
This issue is fixed in the following cumulative updates for SQL Server:
About cumulative updates for SQL Server:
Each new cumulative update for SQL Server contains all the hotfixes and all the security fixes that were included with the previous cumulative update. Check out the latest cumulative updates for SQL Server:
References
Learn about the terminology that Microsoft uses to describe software updates.
