Uninstalling and Upgrading SafeNet ProtectApp MSSQL EKM Provider

This section provides information on the following topics:

• Uninstalling SafeNet ProtectApp MSSQL EKM Provider

• Upgrading SafeNet ProtectApp MSSQL EKM Provider

Uninstalling SafeNet ProtectApp MSSQL EKM Provider

In case you need to uninstall the SafeNet ProtectApp MSSQL EKM Provider, the InstallShield wizard also provides this capability. If the wizard detects that the provider has already been installed, it allows you to remove the current installation.

Before you uninstall the provider, perform the following steps:

1. Unencrypt the database using the following commands:

   USE master;
   ALTER DATABASE <db_name>
   SET ENCRYPTION OFF;
   GO
   

2. Run the following query to check the encryption status of the database:

   select db.name,
   case dbe.encryption_state
   when 0 then 'No database encryption key present, no encryption'
   when 1 then 'Unencrypted'
   when 2 then 'Encryption in progress'
   when 3 then 'Encrypted'
   when 4 then 'Key change in progress'
   when 5 then 'Decryption in progress'
   when 6 then 'Protection change in progress (The certificate or asymmetric key that is encrypting the database encryption key is being changed.)'
   end EncryptionState
   , dbe.percent_complete
   from sys.dm_database_encryption_keys dbe
   inner join sys.databases db on db.database_id = dbe.database_id
   

3. Drop the database encryption key using the following command:

   USE <db_name>;
   GO
   DROP DATABASE ENCRYPTION KEY
   

4. Drop the credential using the following steps:

   1. Use alternate login.

      ALTER LOGIN <login_name>
      DROP CREDENTIAL <credential_name>
      

   2. Delete the credential from SQL Server.

      DROP CREDENTIAL <credential_name>
      

   3. Delete the login from SQL Server

      DROP LOGIN <login_name>
      

5. Delete the asymmetric key from the provider and the CipherTrust Manager.

   DROP ASYMMETRIC KEY <key name>
   

6. Drop the EKM provider.

   DROP CRYPTOGRAPHIC PROVIDER <provider_name>
   

To uninstall the provider:

1. Double-click the setup executable to launch the InstallShield Wizard. The wizard detects the current installation.

2. Click Next to access the Program Maintenance screen.

3. Select Remove and then click Next.

4. Click Remove.

5. After the files are uninstalled, click Finish to complete the process.

Moreover, you can also uninstall the provider from the Control Panel.

Upgrading SafeNet ProtectApp MSSQL EKM Provider

To upgrade the SafeNet ProtectApp MSSQL EKM Provider:

1. Install the latest version of the SafeNet ProtectApp MSSQL EKM Provider. It replaces the installed files with a newer version.

2. Edit the IngrianNAE.Properties file to set the configuration properties.

3. Execute the following query to update the cryptographic provider:

   ALTER CRYPTOGRAPHIC PROVIDER <provider_name> FROM FILE = <installation folder>
   

   Example:

   ALTER CRYPTOGRAPHIC PROVIDER <provider_name>
   FROM FILE ='C:\Program Files\safenet\SQLEKM\safenetsqlekm.dll'
   

   Restart the SQL Server services after altering the provider to load the updated properties file and the provider DLL.