Questions tagged [encryption]
The conversion of data into a form that cannot be easily understood by unauthorized users.
370
questions
1
vote
1
answer
37
views
Understanding of database master key in SQL Server
Let's say I have a production server and I have a database master key ##MS_DatabaseMasterKey## (master_key1) on it. I created a certificate c1, which is encrypted by master_key1 by default. Then I ...
- 602
3
votes
1
answer
47
views
Why isn't database decryption working after failing over to the standby?
We added a new node (N2) to our SQL Server 2019 cluster. On existing N1, decryption queries works fine but when we failover to N2, decryption is failing. The database master key on N1 is encrypted by ...
- 31
0
votes
0
answers
50
views
How do I enable MySQL undo log encryption?
I have set innodb_undo_log_encrypt=ON in /etc/mysql/mysql.conf.d/encryption.cnf under the [mysqld] section but it appears to not be working. Am I just misreading the output below?
Other InnoDB tables ...
0
votes
2
answers
26
views
Postgresql : decrypt column only once when used in WHERE clause
I have the following request, using pg_trm and gin index:
SELECT
email,
first_name,
last_name
FROM external_patient
WHERE PGP_SYM_DECRYPT(cat_name::bytea, '...
0
votes
0
answers
20
views
SQL Server 2016 TDE and Encryption at Host compatibility
As part of a SQL migration to Azure (SQL Server on Azure VMs), the decision was made to implement Azure Disk Encryption (ADE) along with Transparent Disk Encryption (TDE) - a double-whammy setup of ...
- 1
0
votes
0
answers
45
views
When rebuilding sql server on a new machine, should SMK be restored prior to or after restoring system dbs?
Service Master key is at top of sql server encryption hierarchy. Linked server, credentials, database master key (if any) are encrypted using the service master key.
When rebuilding a sql server using ...
- 2,870
0
votes
0
answers
51
views
Where is the service master key (SMK) and database master key stored?
Sql server encryption has got the service master key at the top of the hierarchy.
The database master key is encrypted with the service master key.
The database master key is stored in the respective ...
- 2,870
0
votes
0
answers
26
views
MariadDB: Hashicorp Vault Encryption Plugin fails to initiate when InnoDB Table Encryption turned on
Have integrated MariaDB 10.6.8-4 with Hashicorp Vault using the hashicorp_key_management.so plugin. With this plugin enabled, things work fine until with innodb_encrypt_log turned on. Also, altering ...
1
vote
1
answer
46
views
SSL Encryption for Kafka Pipelines
Any [SingleStore] users out there?
For enabling SSL encryption (only) for Kafka pipelines, we created the pipeline like below:
CREATE PIPELINE `kafka_ssl`
AS LOAD DATA KAFKA '<kafka-host>:<...
- 49
-1
votes
1
answer
44
views
What is the concept of service master key in FCI?
In a single sql server instances, sensitive data like passwords in linked server and credentials are encrypted using the server master key.
The key or objects can be decrypted only by the sql service ...
- 2,870
0
votes
0
answers
209
views
An error occurred during service master key initialization (sql error log)
I have migrated sql server 2017 to new hardware. The sql error log shows following error log whenever the sql server service is restarted.
An error occurred during service master key initialization
I ...
- 2,870
0
votes
1
answer
32
views
How to test whether current sql engine service account can decrypt the SMK?
Is it true that when the sql service account is changed via the config manager then the new account can decrypt the SMK.
However if the change was made via the services.msc, then the new account doesn'...
- 2,870
0
votes
0
answers
42
views
How to deal with encryption keys during a migration?
I am migrating sql server 2017 to another hardware. I have backed up the system dbs, user dbs and restored it on the destination.
Now I am reading about the concept of service master key which is ...
- 2,870
0
votes
1
answer
100
views
How to decrypt zipped data in MSSQL table
We're trying to import (reverse engineer) some data from someone else's MS SQL database, without any vendor support.
In the past the data has been stored in either plain text or RTF so easy to extract....
- 13
2
votes
1
answer
112
views
How do I generate the private key needed to restore the encrypted backup?
I'm simulating the situation where I take a backup from instance A and restore it on instance B. I followed the doc to Backup to Disk with Encryption. Since I'm using only my desktop to simulate the ...
- 4,742
-2
votes
1
answer
72
views
Unknown database connections
an audit has highlighted some (apparently) unencrypted connections on one of our 2 nodes availability groups. The IP address (10.x.x.x) is the IP of the other node in the AG. Does anyone know what ...
- 1
1
vote
3
answers
97
views
Is there a way to add database encryption on certain columns without changing code base?
I've experienced a few companies that have various different codebases ranging from 20 year old code without the source anymore to 1 to 10 year old code with the source but thousands of database calls....
- 111
4
votes
1
answer
200
views
Can't restore a backup of database which has TDE enabled
I'm trying to restore the backup of database which has Transparent Data Encryption enabled. I have verified the certificate thumbprint in the backup file is the same as TDE certificate in [master] ...
- 76
0
votes
0
answers
21
views
3DES Decryption Returning Encrypted Characters at End of Decrypted Password
I'm having a problem with password decryption that has worked correctly for some 10 years in a VB6 DLL but now on newer, faster servers, it's returning the last few encrypted characters of the stored ...
- 11
1
vote
1
answer
93
views
Should a client connecting to a server via a unix-socket be encrypted?
Does a client connection need encryption if the only connection option is via unix socket? e.g. my.cnf
[mysqld]
socket = /run/mysqld/mysqld.sock
I'm considering these options, but I'd prefer not to ...
- 143
0
votes
1
answer
117
views
Detecting whether a varchar value is already encrypted by EncryptByPassPhrase() in SQL Server
Starting with a varchar(100) column named Password in a table Users with one record in it, after performing an update on the column to encrypt it with EncryptByPassPhrase() on the Password column the ...
- 153
0
votes
0
answers
23
views
Azure SQL Column encryption and backups
I am starting a project and for this project I need to encrypt columns containing PII Data in an Azure SQL database. As a developer, I have often handled this step in my code, but moving forward I ...
- 101
0
votes
0
answers
15
views
MySQL Data encryption - Azure portal setting not working
I am having a Azure - MySQL database, which we created with Basic configuration. Later client ask to have a Data encryption policy in place. Azure not support data encryption policy for the Basic ...
- 111
0
votes
0
answers
31
views
How to enable Mongodb data encryption at rest with kubernetes operator
There is documentation for how to secure deployment using TLS with Kubernetes operator in MongoDB. But no such docs there for data encryption at rest. is it enabled by default or how to enable via ...
- 11
0
votes
1
answer
222
views
Certificate (SHA1) loaded in a database but couldn't be found under SQL Configuration Manager and Key Registry
I have two instances on a server. sql 2014 (port 1433) and sql 2016 (port 50019)
I have a certificate with SHA1 algorithm on a server that is not expired.
**When sql server started I can clearly see ...
- 637
4
votes
1
answer
469
views
Monitoring SQL Server Encryption With Extended Events
Is there a way to monitor for encrypted connections through Extended Events? I've monitored for TLS 1.0, 1.1 and 1.2 handshakes in the past using sqlsni.TRACE but cannot find something along the same ...
- 808
1
vote
1
answer
70
views
If I backup my Certificates, why do I need to backup the DMK?
If I have a server where I use TDE, configured as follows:
USE [master]
CREATE DATABASE MyTDE
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'My57r0ngp455';
CREATE CERTIFICATE MyTDECert WITH SUBJECT = '...
- 1,600
0
votes
1
answer
139
views
Secure MySQL database by encryption?
I have cloud webserver running ubuntu where a MySQL database is installed. The database has a table with sensitive data. To protect the data I would like to encrypt the database (or database content). ...
JavaForAndroid
-1
votes
1
answer
709
views
To do encryption for postgresql db backup
Is this possible when someone takes backup of my postgres db it should be in encrypted form(i.e.if root user will access from command line(pg_dump) or from any tool). and how we can decrypt that ...
2
votes
0
answers
46
views
Using ADONET SqlClient library how to access the plain-text value of an encrypted column in SQL Server?
In a SQL Server 2017 database running on my development PC, a column in a particular table is encrypted with a column encryption key.
CREATE TABLE Test(
id int IDENTITY(1,1) NOT NULL PRIMARY ...
- 369
0
votes
0
answers
41
views
Oracle - one port for native network encryption traffic and one for non-encrypted
I need to expose my oracle database to a remote server, and want to require encrypted traffic for that machine (while not affecting my existing connections.) My thought is to use one port for ...
- 236
1
vote
2
answers
155
views
Best way to store encrypted API identifiers (MariaDB)
So for max security I have to encrypt some string keys which I need to call specific actions of an API, at a very regular basis of the use of an application, so performance should also be considered.
...
- 149
0
votes
1
answer
78
views
Data Encryption in MariaDB
It's the first time I'm using encryption in MariaDB, so I need to assure that I'm getting it right. I need to simply store some identifiers in an encrypted way, and am wondering if I'm doing it ...
- 149
0
votes
0
answers
138
views
How to get a encrypt information from a SSAS Database using Power BI?
I have a database encrypted in my SQL Server instance. To be specific,I used the feature 'Always Encrypted' to encrypt two columns from that database.
This database has a relation with a database with ...
- 13
2
votes
1
answer
283
views
Load assembly from a certificate in SQL Server
We received an assembly from external vendor as
CREATE ASSEMBLY MYCALC_DLL
AUTHORIZATION dbo
FROM 0x42A728....<300,000 binary values>
WITH PERMISSION_SET = UNSAFE
GO
And this DLL is been ...
- 340
0
votes
3
answers
146
views
SQL Server TDE - encryption_state 2 stuck at 100% complete
I have enabled TDE on two databases.
One is around 700 GB and that completed over the night and has encryption_state=3
The other one is almost 2 TB. That one has encryption_state=2 and ...
- 11
0
votes
1
answer
159
views
Supported RSA Key Lengths for Encrypted SQL Connections
I'm having trouble finding any documentations regarding supported key lengths for RSA certs to encrypt SQL connections. Our internal CA is issuing certs with a 4096 key length and that seems to work ...
- 223
4
votes
1
answer
1k
views
Always backup database with encryption
Is there a way to force all database and log backups run on the server to be encrypted?
If encryption is not specified, the query will be terminated.
- 81
0
votes
0
answers
40
views
SQL server encryption
i am using SQL server enterprise edition V.2019
i need to encrypt some columns
i liked IBM Guardium for File and Database Encryption but the cost is too high .
so i found some other solutions
1- SQL ...
- 31
1
vote
1
answer
8k
views
how to disable encryption on SQL server 2014 connection that SSL is enforced by windows
In windows 10 , Test connection with a udl file is successful. however, if "Use Encryption for data" was changed the to true. UDL Use Encryption the connection fail with error message:
"...
- 111
1
vote
1
answer
243
views
Can PostgreSQL build an index without storing the source data?
In Elasticsearch we can configure an index to not store the source data. Is it possible to recreate this in PostgreSQL?
Today, we are building an application that encrypts all (sensitive) data before ...
- 111
0
votes
0
answers
76
views
Is offsite replication from MySQL AWS RDS with encrypted RDS storage possible? How?
AWS RDS for MySQL now supports encrypted storage backends. This encrypts the MySQL data and binlogs with a key within AWS's key management system, thus causing offsite replication issues because we ...
- 13
3
votes
1
answer
551
views
Changing Database Encryption Keys
I have been asked to "rotate" the Certs and Keys for a given database and the only way I knew of to accomplish this was to unencrypt the data first, using DECRYPTION BY CERTIFICATE, create ...
4
votes
1
answer
1k
views
Database master key and certificate for backup encryption - SQL Server
I'm trying to understand backup encryption and I have created a master key (in the master DB) and used a password as follows:
USE master;
GO
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'test123!';
GO
...
- 349
1
vote
1
answer
135
views
SQL Server 2019 setting Force Encryption with a script
I have to update 50+ servers to use encrypted connection strings. Is there a way to script setting Force Encryption and TrustServerCertificate (e.g Powershell, or ???) so that I don't have to open ...
- 13
0
votes
2
answers
100
views
Encrypt application name in c# and decrypt in SQL Server
I've encrypted application name in my c# app using MD5, so when constructing the connection string the application name is passed to SQL as encrypted. I would like to decrypt in SQL server the value ...
- 71
1
vote
1
answer
162
views
Incremental encrypted per database backup and Partial restore policy for MySQL 5.7 in replication setup
I will run a replication cluster using MySQL 5.7 and I would like to set up for each database a backup policy that has a full once per day + incremental every N hours with data encrypted (based on the ...
1
vote
2
answers
282
views
SQL Server CLE Encryption Implementation
We got instruction from HQ to implement encryption on our database. The reason be, should a client gets hacked, the hackers cannot access personal info such as names, phone numbers, addresses, etc.
I ...
- 31
0
votes
1
answer
96
views
MySQL Security - Is there an easy way to encrypt a confidential data and also that it cannot view or access by DBA?
Is there an easy way on how can I encrypt a data and store it MySQL database and also it also cannot be viewed by dba?
- 1
-1
votes
1
answer
67
views
Setting up encryption on a SQL2012 Database - how to?
I am not really a DBA, but I have a requirement to set up NIST-approved Encryption on some databases.
Looking around online, there appears to be a few varieties of Encryption for SQL, but the terms ...
