The conversion of data into a form that cannot be easily understood by unauthorized users.

learn more… | top users | synonyms

0
votes
0answers
20 views

SQL TDE Key Format

I'm trying to find the Key Format that SQL TDE uses. Is it PKCS? If so, what #? I haven't been able to identify this based on research done on MS website. And, there is no mention of key format during ...
0
votes
0answers
5 views

OPENDJ(LDAP) and Oracle 12c - Encrypted Password

I would like to know what values ​​the user authentication using a coded password accepted . In Oracle 12c of the hashing algorithm was indeed upgraded to a PBKDF2 based on SHA512 . I have an LDAP ...
1
vote
0answers
13 views

Can i use PGP for securing My database

I have considered TDE and cell level encryption mechanism for securing my database. but these two cannot fully satisfies my requirements.through surfing i found that PGP may help me, but it is mainly ...
1
vote
1answer
332 views

Can we use TDE as an anti-injection technique

TDE prevent unauthorized access to the data by restoring the files to another server, because it requires the original encryption certificate and master key. If i applied a table level encryption ...
1
vote
1answer
36 views

SSL error during SQL Server install

During my SQL Server 2014 Enterprise installation efforts, I encountered an error near the end of the install that has prevented completion. A connection was successfully established with the ...
2
votes
2answers
537 views

Storing Passport Numbers in a database

We're developing a travel/tourist application for a tours company who want to be able to input traveler information into an online database. Is there any security best practice for storing passport ...
2
votes
2answers
31 views

encryption at rest for mysql

A MySQL database needs to contain highly sensitive data that cannot be left unencrypted at rest. But yet the database needs to remain searchable by an app. What are the options for encryption at ...
6
votes
2answers
191 views

Using SQL Server with BitLocker

I have an application that is running on a device that has two partitions: C and D. The application runs off of C while D contains the SQL Server database (mdf file). In addition, D is also encrypted ...
9
votes
4answers
5k views

SQL server service won’t start after disabling TLS 1.0 and SSL 3.0

Because of security reasons, we disabled TLS 1.0 and older protocols on our windows, and enabled just TLS 1.1 and TLS 1.2 under the following registry path: ...
2
votes
1answer
25 views

Microsoft TDE Permissions For Changing Keys

I am setting up roles as a layer of protection inside of MSSQL. One of the roles will only have the ability to change database encryption keys for TDE on the database server. The server will be using ...
2
votes
0answers
14 views

TDE prep: key/certificate backup for restores

I am working in a dev environment to better understand TDE encryption. I have it working along with backups and restores on another server. Had a few questions, I know I need to backup the certificate ...
0
votes
0answers
17 views

Error while creating encryption wallet in Oracle

I need to encrypt tablespaces in my Oracle DB. Following the instructions I edited sqlnet.ora file by adding ENCRYPTION_WALLET_LOCATION. Full content of file listed below: NAMES.DIRECTORY_PATH= ...
2
votes
0answers
16 views

Deny BACKUP CERTIFICATE

In SQL Server, there are three database roles that have CONTROL certificate permissions. Those are db_owner, db_DDLadmin and db_securityadmin. Also, the documentation for decryptbycert specifies ...
2
votes
2answers
306 views

AES 256 data encryption on Mysql

Is there a way to encrypt the whole data of a mysql DB using the AES 256 symmetric encryption method without encrypting the data manually using AES_ENCRYPT ? This article explains about the same ...
2
votes
2answers
141 views

Export a table and zip with password

I would like, from TSQL, to use a view to extract data from a table, output it with BCP, then use non 3rd party tools to ZIP it with a password and AES encryption. Optionnally, I could use a 3rd party ...
1
vote
1answer
14 views

Check if encrpytion key is valid in DB2

I have a DB2 table where one of the columns is encrypted using the two parameter variant of ENCRYPT (so the password is supplied in the SQL itself). Unfortunately due to an ETL issue the column got ...
0
votes
2answers
68 views

Cannot Decrypt the encrypted columns from the database backup on local machine

I've a SQL server 2014 running on one of our server. We're in the process of implementing security steps for our databases. I've encrypted a column in one of the table in the database on the server. ...
2
votes
2answers
77 views

How to safeguard a symmetric key in SQL Server

I've got a database in which I need to store the encrypted values for a column. I use the SQL Server encryption format for encryption. The format is as follows: CREATE MASTER KEY ENCRYPTION BY ...
0
votes
0answers
9 views

Running Cassandra on Encypted filesystem

Looking for pointers for running Cassandra on a Linux File system encrypted by open source tools. Will this satisfy "data-at-rest" encryption ? Is the encryption transparent to Cassandra DB ...
3
votes
1answer
176 views

Alternatives to SQL Server TDE

Due to the high cost of SQL Server Enterprise Edition which includes the Transparent Data Encryption feature I am looking for an alternative product and have only found a couple of options: ...
6
votes
2answers
173 views

SharePoint 2013 Database encryption

I'm using SharePoint 2013 with SQL Server 2012 as persistence layer. I need to encrypt the data stored in the database. I stumbled upon the SQL Server feature Transparent Data Encryption (TDE). What ...
2
votes
1answer
593 views

Best patterns for encrypting database columns/tables in SQL Azure

Azure SQL doesn't support many of the encryption features found in SQL Server (Table and Column encryption). What is the best practice for doing application level encryption into a database that ...
1
vote
2answers
104 views

Encryption in SQL Server 2012/2014

We are hosting sharepoint DBs with AlwaysOn AGs and FCI. My boss asked me what the options for encryption are on the content database, it's backup files and at the column level? I have read about ...
0
votes
0answers
51 views

SQL 2012 Standard Edition (on Azure VM) + Bitlocker. Good or Bad idea?

I will start this question with a few statements to negate any "Why" questions that are going to be asked. The Head of IT wants the data encrypted. Our profession is such that encrypted data is ...
1
vote
1answer
160 views

Encrypted Connection on Sql Server

I want to make SQL server connection encrypted. I know that a certificate is needed, but I haven't been able to. So far, I: created certificate in IIS. added certificate in MMC "Certificates" ...
2
votes
1answer
77 views

SQL Server : GRANT REFERENCES Fails With Msg 15151 as Windows User with sysadmin role and also as 'sa' [closed]

Okay, what am I missing? Someone please hit me with the proverbial clue-by-four. On SQL Server 2008 R2, I execute this command: GRANT REFERENCES ON ASYMMETRIC KEY ::IRESKey to XYZZYEXT; I get this ...
2
votes
1answer
95 views

Microsoft SQL Server 2008 encryption over multiple DB versions

I have about 5 clients deployed running different versions of SQL Server 2008 (Some standard, some enterprise, etc.) And I am being tasked with encrypting the data so: The software we are using can ...
1
vote
0answers
1k views

SQL Server TDE Stuck at Encryption_State 2 and 0% on a Tiny DB

I'm having a heck of a time with this issue and can't figure out what is wrong. I'm not sure how long this tiny DB has been in 'encryption_state = 2' from query: SELECT * FROM ...
5
votes
2answers
99 views

Separation of Duties - Can a DBA patch or Upgrade a SQL Server 2008 R2 DB without TDE Encryption keys?

Are there any considerations I should have in mind when I patch or upgrade a TDE encrypted database? In the context of separation of duties, does the person executing the patch or upgrade process need ...
3
votes
2answers
482 views

Restore db with encrypted column in SQL Server, without overwriting existing Service Master Key

Scenario: Server1 running SQL Server 2012 with Service Master Key A, db1 with Database Master Key 1, symmetric key and certificate available. Password used to protect the DBMK 1 is unknown, ...
4
votes
1answer
1k views

How to restore symmetric key on the new database?

I have an issue with symmetric key restoring on the another database. I have table in the first(old) database with encrypted column.(The table contains encrypted data) The key in the old database has ...
2
votes
0answers
63 views

Restore Database w Master Key and storing password in plain text

We have a (SQL Agent)job that backs up our production db nightly(and restores to a test db server) and we're adding encryption to some of the columns in our tables. I created a master key and bound ...
0
votes
1answer
49 views

Good encryption performance

I'm converting a sql server database to postgresql 9.4. I'm stuck on something that is really really slow. I use copy to bulk insert 200 files of 5000 lines each into 200 tables (one file per table). ...
1
vote
1answer
514 views

Query to List Encryption Certificate for Databases

What certificate is being used to encrypt each of the databases on the instances. I can get the data using the following but how do I write the queries USE master GO -- this provides the list of ...
0
votes
3answers
46 views

Which databases support encryption [closed]

I'm searching for a database that can run on Windows and can be accessed with C#. The Database also requires that the data can be encrypted (ideally without backdoors). Can MariaDB serve here?
0
votes
1answer
68 views

Can we protect data form Database Administrator by encrypting the data?

How can we protect data on my database which is MySQL form database administrator stealing it? Will encrypting it prevent it from being stolen? If yes, how as he already has access to the database ...
4
votes
1answer
1k views

“Force Encryption” vs “Force Protocol Encryption” in SQL Server

I'm trying to understand how the different settings affect the behaviour of my server-client communication. On the server I have installed a self-signed CA with an issued exchange cert which also has ...
0
votes
0answers
62 views

How to test a SQL Server 2012 Cryptographic Provider

One of the nodes in my SQL Server 2012 availability group has been having problems with an external cryptographic provider. It's current separate from the rest of the availability group and can't be ...
1
vote
1answer
136 views

encrypt data without performance issues?

I've googled around for the last 45 minutes or so and it seems like that I can't figure out what kind of options I got when it comes up to encryption in databases. Problem: I got a SaaS product and ...
1
vote
0answers
49 views

I Need to provide encryption at rest for a 50GB MySQL instance running on Centos 6.5

I can't use GusterFS because they don't recommend it and Ceph because it's clear they can't guarantee performance. I can't just encrypt certain database objects because it will take too much ...
2
votes
1answer
1k views

How do I backup/restore database encryption key in order to restore on new server

I am currently in the process of restoring a TDE encrypted database to another instance. I have backed up master key and certificate, and have restored them to the new server fine, but I am still ...
0
votes
0answers
46 views

SQL Server decryption authentication not working with concatenation

I'm trying to retrieve encrypted text according to the authenticator. I am using SQL Server 2014. Everything works except for the decryption. Does anybody know why this is not working? --Step1: ...
3
votes
1answer
937 views

Why is the “The package can not be saved to the file system since its protection level is server storage” error?

When I execute dtutil /sourceserver localhost /SQL "\Maintenance Plans\MaintenancePlan_daily" /copy file;.\MaintenancePlan_daily.dtsx from the answer to my question "Any way to ...
0
votes
0answers
243 views

DBMS_CRYPTO - ORA-06521 PL/SQL: Error mapping function

PACKAGE: user/password -- SYSTEM/SYSTEM CREATE OR REPLACE PACKAGE enc_dec AS FUNCTION encrypt (p_plainText VARCHAR2) RETURN RAW DETERMINISTIC; FUNCTION decrypt (p_encryptedText RAW) RETURN ...
2
votes
1answer
270 views

SQL Server 2012 Transparent Data Encryption and indexes

Does SQL Server TDE allow a query like this: select * from Patient where lastname = 'Smith' to occur without a full-table scan if the lastname column is indexed?
0
votes
1answer
479 views

Lost DMK encryption password for master database

Back story: My company has TDE encryption enabled for some of our databases. The password that the master key was encrypted by for one of our servers is lost. We do have the backup .key file, however, ...
1
vote
0answers
58 views

How to tell if Database Certificate Used?

I plan to migrate a SQL Server database to another server. There is a certificate listed under the Security > Certificates view in SSMS Object Explorer. I ran the below query to check if database is ...
3
votes
2answers
436 views

Why do I need to backup the Database Master Key?

When I make a Database Master Key for a database: CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'Some Long Password' This page from Microsoft recommends I back it up offsite: ...
3
votes
2answers
642 views

Microsoft SQL Server 2005 Encryption Options

I'm trying to explore some encryption options on Microsoft SQL Server 2005. I've recently got around SQL Server 2008 and was able to enable Transparent Data Encryption (TDE). Now I'm trying to figure ...
2
votes
2answers
2k views

Why does the service broker require a master key after restoring to a different server?

I've been moving some databases which use the service broker to new servers recently via backup and restore. I've noticed that once I do this, these databases start throwing the database master key ...