I'm just starting to investigate using TDE and going through some tutorials before taking any action. I have found a good site that provides the following statement to view certificates. Use master GO SELECT * FROM sys.certificates WHERE pvt_key_encryption_type <> 'NA'; GO I was surprised to find an entry for a ConfigMgrEndpointCert, with the issuer SSB Transport Security Certificate in my SQL development environment (no records return in the production environment). I've been searching for what this is, but just finding information on how to create it , not exactly what is it used for. I would like to know more about it and especially if it is any cause for concert that it has NULL in the pvt_key_last_backup_date. Everything I've read state how important it is to backup certificates and keys.