DROP MASTER KEY#
Accepted and does nothing. The statement exists so a script written for SQL Server runs unchanged; it never removes the instance master key.
The key is the encryption root of every secret Querona stores, and it is instance-wide and engine-managed rather than a per-database object a client creates and disposes of. Removing it would leave every stored credential unreadable with no way back, so retiring or replacing a root is an administrative operation rather than a statement. The engine records in its log that the statement had no effect. Every execution is also recorded in the audit log.
Syntax#
Permissions#
Requires the connection-management permission (CreateConnection), the same as the credential statements a
script usually runs before it. CREATE MASTER KEY requires ControlServer, because it changes who can
open the key; this statement changes nothing.
Examples#
DROP MASTER KEY;