I have about 5 clients deployed running different versions of MSSQL server 2008 (Some standard, some enterprise, ect) And I am being tasked with encrypting the data so:
- The software we are using can still query the data with decent efficiency.
- DBA's can still get into the data through Management Studio.
- If someone were to obtain a copy of the backup files (being stored on an external HDD), they would be unable to restore the database.
It seemed as if Transparent Data Encryption would be perfect, and I have it functioning, but "This feature is only available in Enterprise and Developer Editions of SQL Server 2008".
I want to have the method of encryption standard over all of the deployed servers. What is a good method to do so? Should I simply encrypt the HDDs?
Also, am I missing any other way that a person could potentially get a copy of database (Assuming no passwords are breached)?