When a user changes jobs or leaves the company, the key custodian should drop the user’s key copy:
alter encryption key keyname drop encryption for user user_name
For example, if user “bill” leaves the company, the key owner can prevent Bill’s access to key1 by dropping his key copy:
alter encryption key key1 drop encryption for user bill
Adaptive Server does not require a password for this command because no key decryption is required.
drop encryption key drops the base key and all its copies.
