Questions tagged [encryption]

The conversion of data into a form that cannot be easily understood by unauthorized users.

Filter by
Sorted by
Tagged with
1 vote
1 answer
37 views

Understanding of database master key in SQL Server

Let's say I have a production server and I have a database master key ##MS_DatabaseMasterKey## (master_key1) on it. I created a certificate c1, which is encrypted by master_key1 by default. Then I ...
3 votes
1 answer
47 views

Why isn't database decryption working after failing over to the standby?

We added a new node (N2) to our SQL Server 2019 cluster. On existing N1, decryption queries works fine but when we failover to N2, decryption is failing. The database master key on N1 is encrypted by ...
  • 31
0 votes
0 answers
50 views

How do I enable MySQL undo log encryption?

I have set innodb_undo_log_encrypt=ON in /etc/mysql/mysql.conf.d/encryption.cnf under the [mysqld] section but it appears to not be working. Am I just misreading the output below? Other InnoDB tables ...
0 votes
2 answers
26 views

Postgresql : decrypt column only once when used in WHERE clause

I have the following request, using pg_trm and gin index: SELECT email, first_name, last_name FROM external_patient WHERE PGP_SYM_DECRYPT(cat_name::bytea, '...
0 votes
0 answers
20 views

SQL Server 2016 TDE and Encryption at Host compatibility

As part of a SQL migration to Azure (SQL Server on Azure VMs), the decision was made to implement Azure Disk Encryption (ADE) along with Transparent Disk Encryption (TDE) - a double-whammy setup of ...
  • 1
0 votes
0 answers
45 views

When rebuilding sql server on a new machine, should SMK be restored prior to or after restoring system dbs?

Service Master key is at top of sql server encryption hierarchy. Linked server, credentials, database master key (if any) are encrypted using the service master key. When rebuilding a sql server using ...
  • 2,870
0 votes
0 answers
51 views

Where is the service master key (SMK) and database master key stored?

Sql server encryption has got the service master key at the top of the hierarchy. The database master key is encrypted with the service master key. The database master key is stored in the respective ...
  • 2,870
0 votes
0 answers
26 views

MariadDB: Hashicorp Vault Encryption Plugin fails to initiate when InnoDB Table Encryption turned on

Have integrated MariaDB 10.6.8-4 with Hashicorp Vault using the hashicorp_key_management.so plugin. With this plugin enabled, things work fine until with innodb_encrypt_log turned on. Also, altering ...
1 vote
1 answer
46 views

SSL Encryption for Kafka Pipelines

Any [SingleStore] users out there? For enabling SSL encryption (only) for Kafka pipelines, we created the pipeline like below: CREATE PIPELINE `kafka_ssl` AS LOAD DATA KAFKA '<kafka-host>:<...
-1 votes
1 answer
44 views

What is the concept of service master key in FCI?

In a single sql server instances, sensitive data like passwords in linked server and credentials are encrypted using the server master key. The key or objects can be decrypted only by the sql service ...
  • 2,870
0 votes
0 answers
209 views

An error occurred during service master key initialization (sql error log)

I have migrated sql server 2017 to new hardware. The sql error log shows following error log whenever the sql server service is restarted. An error occurred during service master key initialization I ...
  • 2,870
0 votes
1 answer
32 views

How to test whether current sql engine service account can decrypt the SMK?

Is it true that when the sql service account is changed via the config manager then the new account can decrypt the SMK. However if the change was made via the services.msc, then the new account doesn'...
  • 2,870
0 votes
0 answers
42 views

How to deal with encryption keys during a migration?

I am migrating sql server 2017 to another hardware. I have backed up the system dbs, user dbs and restored it on the destination. Now I am reading about the concept of service master key which is ...
  • 2,870
0 votes
1 answer
100 views

How to decrypt zipped data in MSSQL table

We're trying to import (reverse engineer) some data from someone else's MS SQL database, without any vendor support. In the past the data has been stored in either plain text or RTF so easy to extract....
2 votes
1 answer
112 views

How do I generate the private key needed to restore the encrypted backup?

I'm simulating the situation where I take a backup from instance A and restore it on instance B. I followed the doc to Backup to Disk with Encryption. Since I'm using only my desktop to simulate the ...
  • 4,742
-2 votes
1 answer
72 views

Unknown database connections

an audit has highlighted some (apparently) unencrypted connections on one of our 2 nodes availability groups. The IP address (10.x.x.x) is the IP of the other node in the AG. Does anyone know what ...
  • 1
1 vote
3 answers
97 views

Is there a way to add database encryption on certain columns without changing code base?

I've experienced a few companies that have various different codebases ranging from 20 year old code without the source anymore to 1 to 10 year old code with the source but thousands of database calls....
4 votes
1 answer
200 views

Can't restore a backup of database which has TDE enabled

I'm trying to restore the backup of database which has Transparent Data Encryption enabled. I have verified the certificate thumbprint in the backup file is the same as TDE certificate in [master] ...
  • 76
0 votes
0 answers
21 views

3DES Decryption Returning Encrypted Characters at End of Decrypted Password

I'm having a problem with password decryption that has worked correctly for some 10 years in a VB6 DLL but now on newer, faster servers, it's returning the last few encrypted characters of the stored ...
1 vote
1 answer
93 views

Should a client connecting to a server via a unix-socket be encrypted?

Does a client connection need encryption if the only connection option is via unix socket? e.g. my.cnf [mysqld] socket = /run/mysqld/mysqld.sock I'm considering these options, but I'd prefer not to ...
  • 143
0 votes
1 answer
117 views

Detecting whether a varchar value is already encrypted by EncryptByPassPhrase() in SQL Server

Starting with a varchar(100) column named Password in a table Users with one record in it, after performing an update on the column to encrypt it with EncryptByPassPhrase() on the Password column the ...
  • 153
0 votes
0 answers
23 views

Azure SQL Column encryption and backups

I am starting a project and for this project I need to encrypt columns containing PII Data in an Azure SQL database. As a developer, I have often handled this step in my code, but moving forward I ...
0 votes
0 answers
15 views

MySQL Data encryption - Azure portal setting not working

I am having a Azure - MySQL database, which we created with Basic configuration. Later client ask to have a Data encryption policy in place. Azure not support data encryption policy for the Basic ...
0 votes
0 answers
31 views

How to enable Mongodb data encryption at rest with kubernetes operator

There is documentation for how to secure deployment using TLS with Kubernetes operator in MongoDB. But no such docs there for data encryption at rest. is it enabled by default or how to enable via ...
  • 11
0 votes
1 answer
222 views

Certificate (SHA1) loaded in a database but couldn't be found under SQL Configuration Manager and Key Registry

I have two instances on a server. sql 2014 (port 1433) and sql 2016 (port 50019) I have a certificate with SHA1 algorithm on a server that is not expired. **When sql server started I can clearly see ...
  • 637
4 votes
1 answer
469 views

Monitoring SQL Server Encryption With Extended Events

Is there a way to monitor for encrypted connections through Extended Events? I've monitored for TLS 1.0, 1.1 and 1.2 handshakes in the past using sqlsni.TRACE but cannot find something along the same ...
1 vote
1 answer
70 views

If I backup my Certificates, why do I need to backup the DMK?

If I have a server where I use TDE, configured as follows: USE [master] CREATE DATABASE MyTDE CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'My57r0ngp455'; CREATE CERTIFICATE MyTDECert WITH SUBJECT = '...
  • 1,600
0 votes
1 answer
139 views

Secure MySQL database by encryption?

I have cloud webserver running ubuntu where a MySQL database is installed. The database has a table with sensitive data. To protect the data I would like to encrypt the database (or database content). ...
user avatar
-1 votes
1 answer
709 views

To do encryption for postgresql db backup

Is this possible when someone takes backup of my postgres db it should be in encrypted form(i.e.if root user will access from command line(pg_dump) or from any tool). and how we can decrypt that ...
2 votes
0 answers
46 views

Using ADONET SqlClient library how to access the plain-text value of an encrypted column in SQL Server?

In a SQL Server 2017 database running on my development PC, a column in a particular table is encrypted with a column encryption key. CREATE TABLE Test(         id int IDENTITY(1,1) NOT NULL PRIMARY ...
  • 369
0 votes
0 answers
41 views

Oracle - one port for native network encryption traffic and one for non-encrypted

I need to expose my oracle database to a remote server, and want to require encrypted traffic for that machine (while not affecting my existing connections.) My thought is to use one port for ...
  • 236
1 vote
2 answers
155 views

Best way to store encrypted API identifiers (MariaDB)

So for max security I have to encrypt some string keys which I need to call specific actions of an API, at a very regular basis of the use of an application, so performance should also be considered. ...
  • 149
0 votes
1 answer
78 views

Data Encryption in MariaDB

It's the first time I'm using encryption in MariaDB, so I need to assure that I'm getting it right. I need to simply store some identifiers in an encrypted way, and am wondering if I'm doing it ...
  • 149
0 votes
0 answers
138 views

How to get a encrypt information from a SSAS Database using Power BI?

I have a database encrypted in my SQL Server instance. To be specific,I used the feature 'Always Encrypted' to encrypt two columns from that database. This database has a relation with a database with ...
2 votes
1 answer
283 views

Load assembly from a certificate in SQL Server

We received an assembly from external vendor as CREATE ASSEMBLY MYCALC_DLL AUTHORIZATION dbo FROM 0x42A728....<300,000 binary values> WITH PERMISSION_SET = UNSAFE GO And this DLL is been ...
  • 340
0 votes
3 answers
146 views

SQL Server TDE - encryption_state 2 stuck at 100% complete

I have enabled TDE on two databases. One is around 700 GB and that completed over the night and has encryption_state=3 The other one is almost 2 TB. That one has encryption_state=2 and ...
  • 11
0 votes
1 answer
159 views

Supported RSA Key Lengths for Encrypted SQL Connections

I'm having trouble finding any documentations regarding supported key lengths for RSA certs to encrypt SQL connections. Our internal CA is issuing certs with a 4096 key length and that seems to work ...
4 votes
1 answer
1k views

Always backup database with encryption

Is there a way to force all database and log backups run on the server to be encrypted? If encryption is not specified, the query will be terminated.
  • 81
0 votes
0 answers
40 views

SQL server encryption

i am using SQL server enterprise edition V.2019 i need to encrypt some columns i liked IBM Guardium for File and Database Encryption but the cost is too high . so i found some other solutions 1- SQL ...
  • 31
1 vote
1 answer
8k views

how to disable encryption on SQL server 2014 connection that SSL is enforced by windows

In windows 10 , Test connection with a udl file is successful. however, if "Use Encryption for data" was changed the to true. UDL Use Encryption the connection fail with error message: "...
  • 111
1 vote
1 answer
243 views

Can PostgreSQL build an index without storing the source data?

In Elasticsearch we can configure an index to not store the source data. Is it possible to recreate this in PostgreSQL? Today, we are building an application that encrypts all (sensitive) data before ...
0 votes
0 answers
76 views

Is offsite replication from MySQL AWS RDS with encrypted RDS storage possible? How?

AWS RDS for MySQL now supports encrypted storage backends. This encrypts the MySQL data and binlogs with a key within AWS's key management system, thus causing offsite replication issues because we ...
  • 13
3 votes
1 answer
551 views

Changing Database Encryption Keys

I have been asked to "rotate" the Certs and Keys for a given database and the only way I knew of to accomplish this was to unencrypt the data first, using DECRYPTION BY CERTIFICATE, create ...
4 votes
1 answer
1k views

Database master key and certificate for backup encryption - SQL Server

I'm trying to understand backup encryption and I have created a master key (in the master DB) and used a password as follows: USE master; GO CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'test123!'; GO ...
1 vote
1 answer
135 views

SQL Server 2019 setting Force Encryption with a script

I have to update 50+ servers to use encrypted connection strings. Is there a way to script setting Force Encryption and TrustServerCertificate (e.g Powershell, or ???) so that I don't have to open ...
0 votes
2 answers
100 views

Encrypt application name in c# and decrypt in SQL Server

I've encrypted application name in my c# app using MD5, so when constructing the connection string the application name is passed to SQL as encrypted. I would like to decrypt in SQL server the value ...
1 vote
1 answer
162 views

Incremental encrypted per database backup and Partial restore policy for MySQL 5.7 in replication setup

I will run a replication cluster using MySQL 5.7 and I would like to set up for each database a backup policy that has a full once per day + incremental every N hours with data encrypted (based on the ...
1 vote
2 answers
282 views

SQL Server CLE Encryption Implementation

We got instruction from HQ to implement encryption on our database. The reason be, should a client gets hacked, the hackers cannot access personal info such as names, phone numbers, addresses, etc. I ...
  • 31
0 votes
1 answer
96 views

MySQL Security - Is there an easy way to encrypt a confidential data and also that it cannot view or access by DBA?

Is there an easy way on how can I encrypt a data and store it MySQL database and also it also cannot be viewed by dba?
  • 1
-1 votes
1 answer
67 views

Setting up encryption on a SQL2012 Database - how to?

I am not really a DBA, but I have a requirement to set up NIST-approved Encryption on some databases. Looking around online, there appears to be a few varieties of Encryption for SQL, but the terms ...

1
2 3 4 5
8