Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

The conversion of data into a form that cannot be easily understood by unauthorized users.

-1
votes
0answers
22 views

Not able to connect to SQL Server after enabling “Force encryption” using SSMS however no issue while using CLI

I am not able to connect to the SQL server instance after enabling "Force encryption" using SSMS. I am getting below error while trying to connect through SSMS however I am able to connect to the ...
0
votes
0answers
14 views

Oracle Advanced Connection Security SQL

I am looking for a way to check the encryption and integrity protection level in effect for the current session. Is there a system view where I can get those details? It would also be good if the ...
-1
votes
0answers
18 views

How to read in an SQLite database file which might encrypted

I record my accounting on my Phone app, it does not support export database, so I decide to parse it's database by myself. The file is uploaded here: https://drive.google.com/file/d/...
0
votes
1answer
18 views

ERROR: please confirm the keyfile is match and keyring plugin is loaded

I want to create a copy of my Production DB to a new instance. There is a innobackupex running on the prod every night looks like this: innobackupex --user=username --password=password --keyring-...
1
vote
1answer
26 views

Encrypting table in SQL Server [closed]

I'm a .NET guy that is trying to start using table encryption on some of my Users tables but I could do with some questions being answered first. I don't want just anyone to be able to see these ...
0
votes
1answer
41 views

sql server management studio enable encryption

I see that i can manage encryption through the option: right click database->tasks->manage database encryption I see two options using asymmetric key or certificate as shown below but i don't see an ...
0
votes
1answer
38 views

Trigger to decrypt the Encrypted data in a column while it's being inserted [closed]

I have a table TestTableDestination(SerialNumber (varchar) , Name(varchar)) When I want to insert in this table , I'm inserting the encrypted data. What I want to do is to write a trigger with ...
1
vote
1answer
31 views

Is it overkill to encrypt an already hashed BCrypt password?

I'm using BCrypt to hash my passwords on the server side. Before I store it in my MySQL database, would it be overkill to encrypt my hashed-BCrypt password or would storing the hash directly in the ...
-1
votes
1answer
26 views

Determining what user data fields to protect within a database?

Besides passwords, credit/debit card info, social security info, passport info, what other types of data fields should be hashed to give it an additional layer of protection within any database? ...
2
votes
1answer
43 views

Storing sensitive information in a SQL Server project

I am very new with encryption in SQL Server so I am stumbling over things that require prior experience. I have done my googling, but I need reassurance so here we go: Scenario I have a SQL Server ...
4
votes
1answer
192 views

How to send secure emails using sp_send_dbmail

When using sp_send_dbmail to send an email on SQL Server, how do you specify that the email be sent in an encrypted format? I found a thread discussing including the string "[SECURE]" in the subject ...
0
votes
1answer
34 views

How to Oracle DBLink encryption

I have the environment that I explain below and I need to encrypt the data that is sent between my two nodes, I have been reading but I can not find the right solution, I explain: I have an Oracle ...
2
votes
2answers
42 views

How to migrate a database that has a database master key and certificate for encryption

Morning y'all. I'm a little stumped at this one. We have a database that we encrypted a column in a table. This is the master key that I created and the Certificate & Symmetric key. I need to ...
1
vote
1answer
23 views

Oracle RMAN encryption

I would like to know if it is possible given a certain backup made with RMAN in Oracle 12c is encrypted without having to restore said backup, is there any or some queries that verify if an RMAN ...
1
vote
1answer
126 views

How to stop decrypting data after opening master key in SQL Server?

I have implemented data encryption using SQL Server symmetric key encryption technique using a certificate, master key with password. When we backup database from PROD server and restore to a ...
1
vote
1answer
27 views

What are implications for changing encryption from TRIPLE_DES to AES_128?

As title asks, what are implications for changing encryption from TRIPLE_DES to AES_128? I have an older database I've been tasked with hardening, and I need to updated the algorithm used for ...
1
vote
0answers
205 views

Error during MySQL encryption, Code: 3185. “Can't find master key from keyring (…)”

I was trying to configure MySQL keyring plugin and I did the following: • Made sure that keyring_file.dll is present either in C:\Program Files (x86)\MySQL\MySQL Server 5.7\lib\plugin directory. • ...
2
votes
2answers
76 views

Performance Implications of encrypted data in a Clustered Columnstore Index

I am using SQL Server 2016 and expecting some details on below points regarding performance point of view: Is there any performance gain or additional benefit on creating a primary key - unique ...
0
votes
0answers
20 views

Problem setting up client-side encryption to SQL Server “selectively”

We are in the process of selectively encrypting connections to our SQL server using TLS1.2. We have few applications which are not configured for encryption yet (and are in the process)and hence will ...
0
votes
0answers
63 views

When to run sp_refresh_parameter_encryption while using Always Encrypted?

I'm implementing Always Encrypted feature for an ASP.NET Application using SQL Server 2016. I have applied deterministic encryption on first five tables and created few stored procedures that ...
-1
votes
1answer
54 views

SQL Server Intellectual Property (Protecting DB Structure and Relations)

I would like to know is there any update about protecting DB Structure? We deliver a licensed app that uses SQL as its main DBMS and we would like to lock the database structure (schema). I know I ...
0
votes
1answer
37 views

How to configure/setup data at rest encryption in Couchbase 5.1 [closed]

I am evaluating best database solution for a sizeable application. My basic requirements include: Data should be encrypted at disk level Mobile support Scalable Enterprise support I realized ...
2
votes
1answer
34 views

Difference between encrypted backup of an encrypted DB and an unencrypted backup of an encrypted DB

Let's say we have a fully encrypted database (the type of encryption is not considered in this scenario), and we produce two backups for that database. If I encrypt only one of the backups, would ...
0
votes
1answer
145 views

SQL Server 2008 Database encryption

In my company there is MS SQL SERVER 2008 standard edition installed. My problem is we want to encrypt whole database but in standard edition there is encryption like transparent-data-encryption(TDE) ...
2
votes
1answer
151 views

Issue Restoring Certificate to SQL Server When Different Service Account Used

I am attempting to configure backup encryption in SQL 2017 and have run into some problems. I have no issues in creating the master key and certificate on one machine. Nor do I have a problem getting ...
0
votes
1answer
879 views

Always Encrypted: How to insert or update encrypted columns?

I have configured 'Always Encrypted' on one of the columns of a table of my SQL Server database. I am able to select and view data from client SSMS after passing the 'Column Encryption Setting = ...
0
votes
1answer
34 views

How to restore a database with SMK and Cerificate to another computer

On ComputerA, I have a database with SMK and a certificate. I've created this with the following code: CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'Password123'; GO CREATE CERTIFICATE Certificate1 ...
2
votes
1answer
113 views

How do I encrypt data to be decrypted on a linked server? SQL

I have been searching for 2 days for the solution to this, but every solution does not apply to my situation. I have 2 SQL servers: DataServer and InterfaceServer set up as linked servers. DataServer ...
5
votes
1answer
77 views

Ola Hallengren: encrypt, but verify?

I've been using Ola Hallengren's scripts for a few years now, and a recent upgrade to MSSQL2017 has allowed me to start testing encrypted back-ups. Before anyone asks: yes, master keys and encryption ...
1
vote
1answer
196 views

Recreate symmetric key of unknown CREATE SYMMETRIC KEY

I found that for each encryption of a symmetric key an entry in sys.key_encryptions is present and at least for ENCRYPTION BY CERTIFICATE-type entries I can use the certificate of the specified ...
0
votes
0answers
59 views

MySQL generating keyring via UDF leads to SQLException

I am trying to encrypt my tables using a keyring plugin that MySQL suggested. In my /etc/my.cnf file, I have set the early-plugin flag as well as the location of the key ring file. It looks something ...
1
vote
2answers
203 views

Significantly Slower DB Dumps on AWS RDS After Turning on Encryption?

Turning on encryption on an AWS RDS MySQL instance results in significantly slower database dumps (using mysqldump). mysqldump -u test -p -h xxx.aws.com > dump.sql Is there a reason for ...
0
votes
0answers
44 views

Decrypt data (encrypted outside of SQL Server 2014) that used openssl

A client has a thorny problem. Their client encrypted one column of a data file using openssl. (Their client is a Linux based shop and they encrypted the column with openssl using AES 256 CBC.) My ...
1
vote
1answer
85 views

Make encrypted differential backup to same media

I create encrypted backup as follow: BACKUP DATABASE XXX TO DISK = 'C:\Backup\XXX.bak' WITH INIT, FORMAT, ENCRYPTION (ALGORITHM = AES_256, SERVER CERTIFICATE = MyCertificate) Then I try to ...
2
votes
1answer
29 views

SQL Server prevent SA from setting encryption off

Is there a way to prevent any user (including SA) from setting database encryption off (unless password or physical file - cert is provided)? That is: not just some column or specific data - but ...
2
votes
1answer
40 views

how to encrypt one column of a table without using always encrypted?

I have been working on a solution to synchronise logins (using T-SQL) between 2 servers, or between AlwaysOn nodes, inspired by sqlsoldier. It requires a linked Server. When run, this procedure ...
0
votes
0answers
34 views

Import Column Master Key (CMK) in Amazon's KMS - need private key in binary format

We're testing an option for storing CMK from Always Encrypted SQL solution in Amazon network, in their Key Management Solution. The problem is that in KMS I must provide a private key in binary ...
1
vote
2answers
107 views

Azure SQL Db Linked Server - Secured Connection Methods?

The developers want a linked server from our on-prem server to our Azure SQL Db (DBaaS) in order to complete a nightly data pull into our data warehouse. I'd much rather go the route of SSIS but don'...
1
vote
1answer
151 views

Restore SQL Server DB encrypted by EKM - where's the asymmetric key?

MS is clear about restoring TDE backups: Certificate has to be restored on destination OR, in case of EKM, the asymmetric key " When moving a TDE protected database, you must also move the ...
0
votes
0answers
32 views

Reusability of encryption keys using Always Encrypted

Is it possible to reuse the encryption keys and/or certificate between two databases created on the same SQL Server? I have two database which needs to be configured with AE. As of now, the first ...
1
vote
1answer
590 views

AES_DECRYPT Requires Cast?

I'm trying to use the AES_ENCRYPT and AES_DECRYPT functions. I've found an answer to my initial question which was how to decrypt the encrypted string, https://stackoverflow.com/questions/16556375/how-...
0
votes
1answer
97 views

Always Encrypted Certificate clarification

I have configured AE using SSMS on the database server installed with SQL Server 2016. The certificate created under Local Machine option displays the validity as one year. I just want to know what ...
3
votes
1answer
301 views

How to create Always Encrypted Certificate for specific time period?

I have configured Always Encrypted on a custom database using SQL Server 2016. By default, it creates the certificate with a validity of one year. Is there any workaround to create this certificate ...
0
votes
0answers
17 views

Exact encryption being used by Oracle 12

Working with an existing Oracle 12c database which has been configured for encrypted tables. Existing DBA says that it has been configured with AES256 CBC encryption. I was able to find the AES256 ...
4
votes
2answers
1k views

MySQL SSL error: Unable to get private key

Getting an error while trying to enable encryption: [ERROR] SSL error: Unable to get private key from '/etc/mysql/ssl/nginx.key' [Warning] Failed to set up SSL because of the following SSL library ...
4
votes
2answers
445 views

Can anyone recommend an encryption method for ALL user dbs using SQL Server 2016 STANDARD edition?

Our clients are insisting that we now encrypt ALL their SQL Server data at rest, which must include tempdb. I think I have the following options available – Bitlocker entire drive(s) TDE (but the ...
1
vote
0answers
20 views

Do any databases other than SAP ASE support key custodians?

SAP Sybase ASE supports the notion of a key custodian. This allows for a setup where the trust can be split between two roles: the database administrator and a key custodian. The database ...
0
votes
1answer
32 views

How to Use a Certificate from a Different Database

Here are the requirements: Key-encrypting keys are stored separately from data-encrypting keys. ( Certificate and the symmetric key should be stored separately – not within the same database) I ...
0
votes
0answers
76 views

Trying to open service master key in powershell but failed

I recently add script to log ship manually in sql server 2014 via powershell. so I can read header without creating temp table! and I recently try to add password support for this script. here is the ...
0
votes
1answer
209 views

How can I implement data encryption in SQL Express for a VB6 application?

I am a developer tasked with maintaining a legacy application that is written in VB6. With the upcoming introduction of GDPR we are working on an encryption solution for our users. Our users use a ...