Question: how does tde encryption work?
Answer: Encrypting SQL Server: Transparent Data Encryption (TDE) Transparent Data Encryption (TDE) encrypts the data within the physical files of the database, the 'data at rest'. Without the original encryption certificate and master key, the data cannot be read when the drive is accessed or the physical media is stolen.