To Festeron...

When proving out the steps, this is the process I had to use - connect to the SQL instance through the DAC and then to turn on "allow updates"....

To SanjayAttray...

The primary reason anyone would use TDE with EKM is for PCI data protection to meet PCI standards and compliance.

Thanks.