Skip to content

Latest commit

 

History

History
84 lines (68 loc) · 3 KB

certprivatekey-transact-sql.md

File metadata and controls

84 lines (68 loc) · 3 KB
titledescriptionauthorms.authorms.datems.servicems.subservicems.topicms.customf1_keywordshelpviewer_keywordsdev_langsmonikerRange
CERTPRIVATEKEY (Transact-SQL)
CERTPRIVATEKEY (Transact-SQL)
VanMSFT
vanto
07/24/2017
sql
t-sql
reference
ignite-2024
CERTPRIVATEKEY
CERTPRIVATEKEY_TSQL
CERTPRIVATEKEY
TSQL
=azuresqldb-current || >=sql-server-2016 || >=sql-server-linux-2017 || =azuresqldb-mi-current || =fabric

CERTPRIVATEKEY (Transact-SQL)

[!INCLUDE SQL Server Azure SQL Database Azure SQL Managed Instance FabricSQLDB]

This function returns the private key of a certificate in binary format. This function takes three arguments.

  • A certificate ID.
  • An encryption password, used to encrypt the private key bits returned by the function. This approach does not expose the keys as clear text to users.
  • An optional decryption password. A specified decryption password is used to decrypt the private key of the certificate. Otherwise, the database master key is used.

Only users with access to the certificate private key can use this function. This function returns the private key in PVK format.

Syntax

CERTPRIVATEKEY ( cert_ID , ' encryption_password ' [ , ' decryption_password ' ] )

Arguments

certificate_ID
The certificate_id of the certificate. Obtain this value from sys.certificates or from the CERT_ID (Transact-SQL) function. cert_id has data type int.

encryption_password
The password used to encrypt the returned binary value.

decryption_password
The password used to decrypt the returned binary value.

Return types

varbinary

Remarks

Use CERTENCODED and CERTPRIVATEKEY together to return different portions of a certificate, in binary form.

Permissions

CERTPRIVATEKEY is publicly available.

Examples

CREATEDATABASETEST1; GO USE TEST1 CREATE MASTER KEY ENCRYPTION BY PASSWORD ='Use 5tr0ng P^55Words' GO CREATE CERTIFICATE Shipping04 WITH SUBJECT ='Sammamish Shipping Records', EXPIRY_DATE ='20401031'; GO SELECT CERTPRIVATEKEY(CERT_ID('Shipping04'), 'jklalkaa/; uia3dd');

See CERTENCODED (Transact-SQL), Example B, for a more complex example that uses CERTPRIVATEKEY and CERTENCODED to copy a certificate to another database.

See also

Security Functions (Transact-SQL)
CREATE CERTIFICATE (Transact-SQL)Security Functions (Transact-SQL)sys.certificates (Transact-SQL)

close