0

First of all just want to say , I am completely new to Transparent Data Encryption.

Can I get some guidance on things to keep in mind while I am enabling TDE on Critical PRODUCTION Servers. I have read many articles about TDE : It looks like pretty straight forward process but in my case I do have few concerns as below:

Currently we are with AOAG 2014 SQL Server 2014 SP2 GDR On Windows Server 2012 R2

  1. My Databases are FileStream enabled
  2. I am not clear picture as how to test the performance of TempDB performance as it is forever encrypted once I enable TDE. Kindly help me how can I test the TDE TempDB performance.
  3. I am using Third party tool for FileStream enabled Databases backup and my backup files are around 700 GB size. Once I enabled TDE what will happen if I am planning to restore them to a 1. Same environment with same Certificate and same DMK (PROD --> PROD) . 2. PROD --> STG environment where PROD is with diff certificate and STG is with different Certificate.
  4. Is there a way I can test the end-end Server level testing post enabling the TDE. How does the CPU , RAM , Disk IO , Network above . I read according to MS only there will be 5-10% more resources but no great performance impact when compared non TDE Enabled Databases.

  5. Please share some insights on things I should definitely keep in mind before enabling TDE .

  6. If there are any Testing cases I can do it to measure performance after TDE enablement please do share me some insights.

  7. Backup compression and TDE does not go hand in hand i.e. You wont be able to leverage backup compression when you enable TDE. This means your VLDB backups will be HUGE ! Does this mean my existing Backup files is going to increase more and more ?? I am using third party tool , does this points affect my third party tool backups too ?? Please advice.

Regards

  • More generally, it sounds like you need a way to do load testing & performance testing. Do you currently have anything in place to monitor performance or do this sort of testing? – AMtwo Oct 16 '18 at 15:25
  • @AMtwo I do have DEV AOAG 2014 version to test it . Similar environment to that of PRODUCTION. – DBOn Oct 17 '18 at 8:28
  • You have hardware to test on, but do you have a method to test? Particularly load testing, which requires a way to capture and compare performance against a benchmark. You'll need to have a Workload to replay in your test environment. You'll need a way to capture performance information. You'll need a performance baseline to compare against. And you'll need a process to test the changes. Do you have anything in place currently to do that sort of performance monitoring/baselineing/testing? Have you researched any options in any of those areas? – AMtwo Oct 17 '18 at 12:27

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.