Take the 2-minute tour ×
Database Administrators Stack Exchange is a question and answer site for database professionals who wish to improve their database skills and learn from others in the community. It's 100% free, no registration required.

We're trying to use Bitlocker to secure an SQL Server 2012 database. We don't have any issue getting bitlocker to work... the issue we have is that once the drive is locked, SQL Server can no longer read the data.

We'd love to use TDE, obviously, but since that's limited to the Enterprise edition, that's a no-go. We have TPM activated on the server. This is in a Windows Domain and we use Windows Authentication... but once the drive is encrypted, we cannot access the DB with anything.

What am I missing here?

share|improve this question
add comment

migrated from stackoverflow.com Dec 6 '13 at 18:22

This question came from our site for professional and enthusiast programmers.

1 Answer

up vote 2 down vote accepted

You need to use the account that the SQL Server runs as to enable Bitlocker.

share|improve this answer
    
Oh - so the Domain account we use for SQL Server itself must be the account used to turn on Bitlocker? Does the C:\ drive also need to have bitlocker enabled (since that's where the SQL Server runs)? –  doulos2k Dec 6 '13 at 18:51
    
Yes, the SQL Account needs to enable bitlocker. No you don't need to bitlocker the C drive unless you have another reason to. –  mrdenny Dec 9 '13 at 8:41
    
Okay - we'll try that today and I'll report back. –  doulos2k Dec 9 '13 at 15:26
    
That was exactly it. I will say that you really DO want to turn Bitlocker on for your system drive as well. Otherwise you have to manually unlock the drive every time you restart the system. (The auto-unlock feature requires the system drive to be bitlocked) –  doulos2k Dec 9 '13 at 22:03
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.