Deploying transparent data encryption I have an installation of SQL 2016 Enterprise and my boss want to deploy TDE.  I googled online and all the instruction said about "you can use a self sign certificate for test/dev purpose".  Most guide just said backup the master key and cert and that's it.  

I have two SQL Server, they sit on two separate domain.  I want to make sure the database encrypted on one server can be restored on the other server.

What is the proper way and step that should be applied to a production server.  I think there is more than just creating a self sign cert and back it up somewhere safe.
This article has a great step through exactly how to enable TDE.  This includes generating keys/certificates, everything.  When you turn TDE on, it will start encrypting in the background as well as when pages are accessed or flushed to disk.

Also, sidenote, TempDB also gets encrypted so if you have other DBs/SPs that aren't encrypted and use TempDB, there may be a slight performance hit when you lay data down in TempDB and pick it back up.  You're on 2016 so you still get native backup compression with TDE (hooray!)

http://joeysbasisblog.blogspot.com/2013/10/enable-or-disable-transparent-data.html