无法打开的证书作为SQL用户帐户对称密钥

Question

我创建使用证书像这样我的钥匙：

CREATE SYMMETRIC KEY some_Key_01
WITH ALGORITHM = AES_256
ENCRYPTION BY CERTIFICATE myCert;
GO

GRANT VIEW DEFINITION ON CERTIFICATE::myCert TO sqlUser;
GO

GRANT VIEW DEFINITION ON SYMMETRIC KEY::some_Key_01 TO sqlUser;
GO

然后我尝试打开与我们它像这样：

OPEN SYMMETRIC KEY some_Key_01
DECRYPTION BY CERTIFICATE myCert;
GO
SELECT CONVERT(datetime, DecryptByKey(EncryptedField))
AS 'DecryptedField'
FROM MyTable;
GO

但我得到的消息：
Msg 15151, Level 16, State 1, Line 23
Cannot find the certificate 'myCert', because it does not exist or you do not have permission.

Answer 1

你需要有证书上的control权限：

GRANT CONTROL ON CERTIFICATE::myCert TO sqlUser; 
GO 

并授予关键references权限：

GRANT REFERENCES ON SYMMETRIC KEY::some_Key_01 TO sqlUser; 
GO