BACKUP SERVICE MASTER KEY (Transact-SQL)
Applies to: SQL Server Azure SQL Managed Instance
Exports the service master key.
Transact-SQL syntax conventions
BACKUP SERVICE MASTER KEY TO FILE = 'path_to_file' ENCRYPTION BY PASSWORD = 'password'
To view Transact-SQL syntax for SQL Server 2014 and earlier, see Previous versions documentation.
Specifies the complete path, including file name, to the file to which the service master key will be exported. This may be a local path or a UNC path to a network location.
Is the password used to encrypt the service master key in the backup file. This password is subject to complexity checks. For more information, see Password Policy.
The service master key should be backed up and stored in a secure, off-site location. Creating this backup should be one of the first administrative actions performed on the server.
Requires CONTROL SERVER permission on the server.
In the following example, the service master key is backed up to a file.
BACKUP SERVICE MASTER KEY TO FILE = 'c:\temp_backups\keys\service_master_key' ENCRYPTION BY PASSWORD = '3dH85Hhk003GHk2597gheij4';
ALTER SERVICE MASTER KEY (Transact-SQL)
RESTORE SERVICE MASTER KEY (Transact-SQL)