As part of our new key management system for SQL server, we are backing up the Private Key and Certificate file to a UNC file path that has very restricted access to
only Key and Certificate custodians. When we execute the backup script, it works and puts the Certificate and Key files to the UNC path, but the files do not inherit NTFS permissions from the target path and our Key and Certificate Custodians do not
have access to these files. Is there a way to "force" these files to inherit permissions from their target folder structure?
Here is the SQL script used to generate our key pair:
BACKUP CERTIFICATE NewCert
TO FILE = '\\UNCCertificatePath\CertificateFile.cert’