Configuring EKM on the SQL Server

2min

This section shows how to enable EKM on the SQL Server and register the  EKM provider.
Enable the EKM provider option
To use the  EKM provider, you must enable the EKM provider option on the SQL Server.
1
Open the SQL Server Management Studio application.
2
Connect to the SQL Server
3
Open a Query window and execute the following commands:
SQL
sp_configure 'show advanced', 1
GO
RECONFIGURE
GO
sp_configure 'EKM provider enabled', 1
GO
RECONFIGURE
GO
sp_configure 'show advanced', 1
GO
RECONFIGURE
GO
sp_configure 'EKM provider enabled', 1
GO
RECONFIGURE
GO
﻿
Register the Futurex EKM provider
1
Open a new Query window in SQL Server Management Studio and execute the following command:
SQL
CREATE CRYPTOGRAPHIC PROVIDER FuturexEkmProvider
    FROM FILE = 'C:\Program Files\Futurex\fxekm\fxekm.dll';
GO
CREATE CRYPTOGRAPHIC PROVIDER FuturexEkmProvider
    FROM FILE = 'C:\Program Files\Futurex\fxekm\fxekm.dll';
GO
﻿
If you encounter the error, Cannot initialize cryptographic provider. Provider error code: 1. (Failure - Consult EKM provider for details), perform the following steps:
Switch the Server Authentication type to Windows Authentication. 
Right-click the DB server, select Properties, and go to the Security tab. 
Change the Server Authentication type from SQL & Windows Authentication to Windows Authentication.
﻿

Updated 26 Aug 2024

Did this page help you?

Configure the FXEKM file

Enabling TDE on SQL Server by using EKM