How to pass custom encryption key to RavenDB client?

[dtaalbers]

I am running a RavenDB cloud instance. The databases are created by my software. How do I pass in a custom encryption key when creating an encrypted database? I've tried it like this, the database is created but it can't be loaded by RavenDB studio with a load errors. Any help would be appreciated!

var record = new DatabaseRecord(name)
{
    Encrypted = true,
    Settings =
    {
        ["Security.MasterKey"] = encryptionKeyBase64 
    }
};

await store.Maintenance.Server.SendAsync(new CreateDatabaseOperation(record, 3));

[ayende]

That isn't quite how this work. The master key for a database is not part of the global state of the cluster.
Instead, it is a local state for each node, and you mark the database as encrypted.

In other words, we create a secret key with the name of the database, and then create the database for that.

fetch("https://a.books.ravendb.run/admin/secrets/distribute?name=test&node=A", {
  "referrer": "https://a.books.ravendb.run/studio/index.html",
  "body": "XqkQTscDtg2V22HEhxNfrWMA1qdHuppV3jNgegXKZx8=",
  "method": "POST"
});

The reason for that is that we keep strict separation of the secrets from anything else, and you can run with different keys for each node in the cluster.
The Distribute endpoint push the secret value to the specified nodes, skipping the need to do that manually.

[ayende]

Note that we are missing a public API to do that, it seems.
See: https://github.com/ravendb/ravendb/blob/v6.2/src/Raven.Studio/typescript/commands/database/secrets/distributeSecretCommand.ts

There is no C# equivalent. But it should be simple to create one.