When TDE is enabled, all the records written to transaction log files are encrypted as well. During the TDE certification/key rotation, these log records are not touched.… Read more “You may fail to backup log or restore log after TDE certification/key rotation”