A finding from a STIG evaluation, CCE-19832-5 reports that the [master] database should be encrypted with a Database Master Key using an encrypted password that meets DoD standards.
This a result of an AppDetective scan; it states:
Resource key 'database_containing_encrypted_key' not found.=[master].
I am not deliberately storing anything in the master database.
I've encrypted all user databases but my question is: do you encrypt the system databases, specifically master? I am using TDE with SQL Server 2012.
master
database at all? It says "the database master key" (for the specified database), not "the master database key" or "the database master key for the master database." In any case, what information are you putting into yourmaster
database that needs protecting? Only things I can think of are SQL auth password hashes, or if the names of your databases or logins reveal some proprietary secret. There are better fixes for those than applying TDE tomaster
, IMHO.