SELECT
d.[name] AS DatabaseName,
encryption_state,
encryption_state_desc =
CASE encryption_state
WHEN '0' THEN 'No database encryption key present, no encryption'
WHEN '1' THEN 'Unencrypted'
WHEN '2' THEN 'Encryption in progress'
WHEN '3' THEN 'Encrypted'
WHEN '4' THEN 'Key change in progress'
WHEN '5' THEN 'Decryption in progress'
WHEN '6' THEN 'Protection change in progress (The certificate or asymmetric key that'
+ ' is encrypting the database encryption key is being changed.)'
ELSE 'No Status' END,
percent_complete,
certificate_name = (SELECT name
FROM master.sys.certificates AS c
WHERE c.thumbprint = a.encryptor_thumbprint),
encryptor_thumbprint,
encryptor_type,
CONCAT('USE [', d.[name], ']
GO
CREATE DATABASE ENCRYPTION KEY WITH ALGORITHM = AES_256 ENCRYPTION BY SERVER CERTIFICATE [TDE];
GO
ALTER DATABASE [', d.[name], '] SET ENCRYPTION ON;
GO') AS encryptCommand
FROM sys.databases AS d
LEFT OUTER JOIN sys.dm_database_encryption_keys AS a
ON d.database_id = a.database_id
WHERE d.source_database_id IS NULL
AND d.database_id > 4
ORDER BY DatabaseName;