类别：: 系统函数（系统信息）

SYSTEM$ACTIVATE_CMK_INFO¶

Activates Tri-Secret Secure in your account, optionally with private connectivity, by using the CMK (customer-managed key) information that you registered for your account.

This system function performs the following actions:

Configures your account to use Tri-Secret Secure with the registered CMK.
Creates a new composed account master key.
Registers your account with the rekeying background service.
Optionally, enables private connectivity on an active CMK, without rekeying.

备注

Private connectivity isn't currently supported on Google Cloud.

另请参阅：: Understanding CMK self-registration with support activation of Tri-Secret Secure

语法¶

SYSTEM$ACTIVATE_CMK_INFO( [ <option> ] )

Copy

实参¶

必填

无。

可选

option

You can specify one of the following values:

REKEY_SAME_CMK: Allows rekeying with the active CMK.
UPDATE_PRIVATELINK: Updates the privatelink status from the registered CMK.

返回¶

Success or error messages.

访问控制要求¶

Only users that are granted the MODIFY privilege on the account can call this function. The MODIFY privilege is typically granted only to the ACCOUNTADMIN role.

使用说明¶

The background service generates email messages that notify the account administrator about rekeying and Tri-Secret Secure activation status.

示例¶

Activate Tri-Secret Secure for your Snowflake account:

SELECT SYSTEM$ACTIVATE_CMK_INFO();

Copy

Rekey with your current CMK:

SELECT SYSTEM$ACTIVATE_CMK_INFO('REKEY_SAME_CMK');

Copy

Update private connectivity enablement on the CMK that is registered for use with Tri-Secret Secure and the active CMK, without rekeying.

SELECT SYSTEM$ACTIVATE_CMK_INFO('UPDATE_PRIVATELINK');

Copy