My DBs are big (7.5 TB), they are encrypted using TDE. I need to rotate the keys once every 2 years. I have a DR site which is getting synchronize with the primary site using a 25 MBits line. The synchronization is made using SQL 2012 AlwaysOn.
As the key rotation generates lots of transform on the lines, I will not be able to do it.
How should I rotate the keys while keeping the synchronization active?