Dropping a Key Copy

When a user changes jobs or leaves the company, the key custodian should drop the user’s key copy.

The syntax is:

alter encryption key keyname
	drop encryption for user user_name

For example, if user “bill” leaves the company, the key owner can prevent “bill”’s access to key1 by dropping his key copy:

alter encryption key key1
    drop encryption for user bill

SAP ASE does not require a password for this command because no key decryption is required.

drop encryption key drops the base key and all its copies.