The TDE Certificate can then be used to create a DEK that will be used for the individual SharePoint content database that will be encrypted. Use syntax similar to the following, but substitute SharePointContentDB for the name of your SharePoint Content DB. A unique DEK will need to be created for each Content DB encrypted: