Transparent Data Encryption (TDE):

How to restore TDE databases on Target server ?

On Source :

1) Create Master Encryption Key (DMK) under master database

      (If password missed, please run the Create Master key with new password . )

2) Create Certificate under master database 

3) Backup Certificate under master with .pvk with password.

4) Create Database Encryption key (DEK) on user database

5) Enable Encryption on database 

On Target:

1) Check if Master Key exists or not.

       (If not, create DMK with any password, need not to be same as Source)

2) Create certificate under Master ( Copy .pvk file from Source and add password to decrypt the certificate).

3) If cert, .pvk not there, you will see thumbprint error while restoring )

       (If missed, please run the backup cert command with new password and this should be same on Target)

4) Restore database on Target server 

How to add Transparent Data Encryption (TDE) databases to Always on AG ?