Hello,
Seeing following error when I try to drop a user from the said database:
Msg 15138, Level 16, State 1, Line 1
The database principal owns a certificate in the database, and cannot be dropped.
Here are the list when I run select * from sys.certificates inside SSISDB database:
| name | certificate_id | principal_id | pvt_key_encryption_type | pvt_key_encryption_type_desc | is_active_for_begin_dialog | issuer_name |
| MS_SQLISSigningCertificate | 256 | 1 | NA | NO_PRIVATE_KEY | 1 | MS_SQLISSigningCertificate |
| MS_Cert_Proj_Param_1 | 258 | 6 | MK | ENCRYPTED_BY_MASTER_KEY | 1 | ISServerCertificate |
| MS_Cert_Proj_Param_2 | 260 | 6 | MK | ENCRYPTED_BY_MASTER_KEY | 1 | ISServerCertificate |
| MS_Cert_Proj_3 | 261 | 6 | MK | ENCRYPTED_BY_MASTER_KEY | 1 | ISServerCertificate |
| MS_Cert_Proj_Param_3 | 262 | 6 | MK | ENCRYPTED_BY_MASTER_KEY | 1 | ISServerCertificate |
| MS_Cert_Proj_Param_4 | 264 | 6 | MK | ENCRYPTED_BY_MASTER_KEY | 1 | ISServerCertificate |
| MS_Cert_Proj_5 | 265 | 6 | MK | ENCRYPTED_BY_MASTER_KEY | 1 | ISServerCertificate |
| MS_Cert_Proj_Param_5 | 266 | 6 | MK | ENCRYPTED_BY_MASTER_KEY | 1 | ISServerCertificate |
Inside Master db, there are different certificates. Do I need to change the ownership of the certificates to some other user (for now, I would like to change the ownership to some other user who has either db_owner role or sysadmin role) and if so, how to identify who owns the certificates and any impact on the SSISDB or the deployed packages?
Will greatly appreciate your help.
Thanks.
Victor
Victor