Vault
Upgrade the Vault EKM provider
[!IMPORTANT]
Documentation Update: Product documentation, which were located in this repository under/website
, are now located inhashicorp/web-unified-docs
, colocated with all other product documentation. Contributions to this content should be done in theweb-unified-docs
repo, and not this one. Changes made to/website
content in this repo will not be reflected on the developer.hashicorp.com website.
Note: The upgrade process will put the database into maintenance mode and require a restart. It is highly recommended to test this procedure in a staging environment prior to running it on a production database.
Disable the Vault EKM Provider, and verify it is marked disabled:
ALTER CRYPTOGRAPHIC PROVIDER TransitVaultProvider DISABLE; SELECT * FROM sys.cryptographic_providers;
Install the latest version from releases.hashicorp.com, following the instructions in the installer.
- If you get a "Files in Use" prompt while running the installer, select "Do not close applications. A reboot will be required", and restart after the installation has completed.
Reload the provider DLL:
ALTER CRYPTOGRAPHIC PROVIDER TransitVaultProvider FROM FILE = 'C:\Program Files\HashiCorp\Transit Vault EKM Provider\TransitVaultEKM.dll';
Now re-enable the Vault EKM Provider and verify it is both marked enabled and the version reported matches the version of the installer:
ALTER CRYPTOGRAPHIC PROVIDER TransitVaultProvider ENABLE; SELECT * FROM sys.cryptographic_providers;
Finally, restart Microsoft SQL Server.