First of all just want to say , I am completely new to Transparent Data Encryption.
Can I get some guidance on things to keep in mind while I am enabling TDE on Critical PRODUCTION Servers. I have read many articles about TDE : It looks like pretty straight forward process but in my case I do have few concerns as below:
Currently we are with AOAG 2014 SQL Server 2014 SP2 GDR On Windows Server 2012 R2
- My Databases are FileStream enabled
- I am not clear picture as how to test the performance of TempDB performance as it is forever encrypted once I enable TDE. Kindly help me how can I test the TDE TempDB performance.
- I am using Third party tool for FileStream enabled Databases backup and my backup files are around 700 GB size. Once I enabled TDE what will happen if I am planning to restore them to a 1. Same environment with same Certificate and same DMK (PROD --> PROD) . 2. PROD --> STG environment where PROD is with diff certificate and STG is with different Certificate.
Is there a way I can test the end-end Server level testing post enabling the TDE. How does the CPU , RAM , Disk IO , Network above . I read according to MS only there will be 5-10% more resources but no great performance impact when compared non TDE Enabled Databases.
Please share some insights on things I should definitely keep in mind before enabling TDE .
If there are any Testing cases I can do it to measure performance after TDE enablement please do share me some insights.
- Backup compression and TDE does not go hand in hand i.e. You wont be able to leverage backup compression when you enable TDE. This means your VLDB backups will be HUGE ! Does this mean my existing Backup files is going to increase more and more ?? I am using third party tool , does this points affect my third party tool backups too ?? Please advice.