Questions tagged [encryption]
The conversion of data into a form that cannot be easily understood by unauthorized users.
363
questions
-1
votes
1
answer
24
views
What is the concept of service master key in FCI?
In a single sql server instances, sensitive data like passwords in linked server and credentials are encrypted using the server master key.
The key or objects can be decrypted only by the sql service ...
- 2,223
0
votes
0
answers
22
views
An error occurred during service master key initialization (sql error log)
I have migrated sql server 2017 to new hardware. The sql error log shows following error log whenever the sql server service is restarted.
An error occurred during service master key initialization
I ...
- 2,223
0
votes
1
answer
20
views
How to test whether current sql engine service account can decrypt the SMK?
Is it true that when the sql service account is changed via the config manager then the new account can decrypt the SMK.
However if the change was made via the services.msc, then the new account doesn'...
- 2,223
0
votes
0
answers
22
views
How to deal with encryption keys during a migration?
I am migrating sql server 2017 to another hardware. I have backed up the system dbs, user dbs and restored it on the destination.
Now I am reading about the concept of service master key which is ...
- 2,223
0
votes
1
answer
76
views
How to decrypt zipped data in MSSQL table
We're trying to import (reverse engineer) some data from someone else's MS SQL database, without any vendor support.
In the past the data has been stored in either plain text or RTF so easy to extract....
- 13
1
vote
1
answer
46
views
How do I generate the private key needed to restore the encrypted backup?
I'm simulating the situation where I take a backup from instance A and restore it on instance B. I followed the doc to Backup to Disk with Encryption. Since I'm using only my desktop to simulate the ...
- 4,394
-2
votes
1
answer
55
views
Unknown database connections
an audit has highlighted some (apparently) unencrypted connections on one of our 2 nodes availability groups. The IP address (10.x.x.x) is the IP of the other node in the AG. Does anyone know what ...
- 1
1
vote
3
answers
71
views
Is there a way to add database encryption on certain columns without changing code base?
I've experienced a few companies that have various different codebases ranging from 20 year old code without the source anymore to 1 to 10 year old code with the source but thousands of database calls....
- 111
4
votes
1
answer
128
views
Can't restore a backup of database which has TDE enabled
I'm trying to restore the backup of database which has Transparent Data Encryption enabled. I have verified the certificate thumbprint in the backup file is the same as TDE certificate in [master] ...
- 76
0
votes
0
answers
16
views
3DES Decryption Returning Encrypted Characters at End of Decrypted Password
I'm having a problem with password decryption that has worked correctly for some 10 years in a VB6 DLL but now on newer, faster servers, it's returning the last few encrypted characters of the stored ...
- 11
1
vote
1
answer
35
views
Should a client connecting to a server via a unix-socket be encrypted?
Does a client connection need encryption if the only connection option is via unix socket? e.g. my.cnf
[mysqld]
socket = /run/mysqld/mysqld.sock
I'm considering these options, but I'd prefer not to ...
- 143
0
votes
1
answer
73
views
Detecting whether a varchar value is already encrypted by EncryptByPassPhrase() in SQL Server
Starting with a varchar(100) column named Password in a table Users with one record in it, after performing an update on the column to encrypt it with EncryptByPassPhrase() on the Password column the ...
- 153
0
votes
0
answers
19
views
Azure SQL Column encryption and backups
I am starting a project and for this project I need to encrypt columns containing PII Data in an Azure SQL database. As a developer, I have often handled this step in my code, but moving forward I ...
- 101
0
votes
0
answers
13
views
MySQL Data encryption - Azure portal setting not working
I am having a Azure - MySQL database, which we created with Basic configuration. Later client ask to have a Data encryption policy in place. Azure not support data encryption policy for the Basic ...
- 111
0
votes
0
answers
20
views
How to enable Mongodb data encryption at rest with kubernetes operator
There is documentation for how to secure deployment using TLS with Kubernetes operator in MongoDB. But no such docs there for data encryption at rest. is it enabled by default or how to enable via ...
naxoki
0
votes
1
answer
76
views
Certificate (SHA1) loaded in a database but couldn't be found under SQL Configuration Manager and Key Registry
I have two instances on a server. sql 2014 (port 1433) and sql 2016 (port 50019)
I have a certificate with SHA1 algorithm on a server that is not expired.
**When sql server started I can clearly see ...
- 637
4
votes
1
answer
243
views
Monitoring SQL Server Encryption With Extended Events
Is there a way to monitor for encrypted connections through Extended Events? I've monitored for TLS 1.0, 1.1 and 1.2 handshakes in the past using sqlsni.TRACE but cannot find something along the same ...
- 788
1
vote
1
answer
39
views
If I backup my Certificates, why do I need to backup the DMK?
If I have a server where I use TDE, configured as follows:
USE [master]
CREATE DATABASE MyTDE
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'My57r0ngp455';
CREATE CERTIFICATE MyTDECert WITH SUBJECT = '...
- 1,450
0
votes
1
answer
106
views
Secure MySQL database by encryption?
I have cloud webserver running ubuntu where a MySQL database is installed. The database has a table with sensitive data. To protect the data I would like to encrypt the database (or database content). ...
JavaForAndroid
-1
votes
1
answer
234
views
To do encryption for postgresql db backup
Is this possible when someone takes backup of my postgres db it should be in encrypted form(i.e.if root user will access from command line(pg_dump) or from any tool). and how we can decrypt that ...
2
votes
0
answers
17
views
Using ADONET SqlClient library how to access the plain-text value of an encrypted column in SQL Server?
In a SQL Server 2017 database running on my development PC, a column in a particular table is encrypted with a column encryption key.
CREATE TABLE Test(
id int IDENTITY(1,1) NOT NULL PRIMARY ...
- 369
0
votes
0
answers
28
views
Oracle - one port for native network encryption traffic and one for non-encrypted
I need to expose my oracle database to a remote server, and want to require encrypted traffic for that machine (while not affecting my existing connections.) My thought is to use one port for ...
- 236
1
vote
2
answers
79
views
Best way to store encrypted API identifiers (MariaDB)
So for max security I have to encrypt some string keys which I need to call specific actions of an API, at a very regular basis of the use of an application, so performance should also be considered.
...
- 137
0
votes
1
answer
52
views
Data Encryption in MariaDB
It's the first time I'm using encryption in MariaDB, so I need to assure that I'm getting it right. I need to simply store some identifiers in an encrypted way, and am wondering if I'm doing it ...
- 137
0
votes
0
answers
107
views
How to get a encrypt information from a SSAS Database using Power BI?
I have a database encrypted in my SQL Server instance. To be specific,I used the feature 'Always Encrypted' to encrypt two columns from that database.
This database has a relation with a database with ...
- 13
2
votes
1
answer
149
views
Load assembly from a certificate in SQL Server
We received an assembly from external vendor as
CREATE ASSEMBLY MYCALC_DLL
AUTHORIZATION dbo
FROM 0x42A728....<300,000 binary values>
WITH PERMISSION_SET = UNSAFE
GO
And this DLL is been ...
- 324
0
votes
3
answers
112
views
SQL Server TDE - encryption_state 2 stuck at 100% complete
I have enabled TDE on two databases.
One is around 700 GB and that completed over the night and has encryption_state=3
The other one is almost 2 TB. That one has encryption_state=2 and ...
- 11
0
votes
1
answer
89
views
Supported RSA Key Lengths for Encrypted SQL Connections
I'm having trouble finding any documentations regarding supported key lengths for RSA certs to encrypt SQL connections. Our internal CA is issuing certs with a 4096 key length and that seems to work ...
- 223
4
votes
1
answer
1k
views
Always backup database with encryption
Is there a way to force all database and log backups run on the server to be encrypted?
If encryption is not specified, the query will be terminated.
- 81
0
votes
0
answers
45
views
MSSQL 2012 Update (or create new certificate with same name) that uses Symmetric Key encryption
Super short version of my question:
For a MSSQL 2012 DB is it possible to update the current certificate with a new expiry date and new PW (or create new certificate with same name)? Or some other ...
- 101
0
votes
0
answers
35
views
SQL server encryption
i am using SQL server enterprise edition V.2019
i need to encrypt some columns
i liked IBM Guardium for File and Database Encryption but the cost is too high .
so i found some other solutions
1- SQL ...
- 31
1
vote
1
answer
4k
views
how to disable encryption on SQL server 2014 connection that SSL is enforced by windows
In windows 10 , Test connection with a udl file is successful. however, if "Use Encryption for data" was changed the to true. UDL Use Encryption the connection fail with error message:
"...
- 111
1
vote
1
answer
159
views
Can PostgreSQL build an index without storing the source data?
In Elasticsearch we can configure an index to not store the source data. Is it possible to recreate this in PostgreSQL?
Today, we are building an application that encrypts all (sensitive) data before ...
- 111
0
votes
0
answers
30
views
Using Master Key & Certificate on Always On Replica
Im running on a SQL 2017 Always On 14.0.3381.3 DB.
Im trying to use EncryptByKey and DecryptByKey feature to encrypt sensitive info in one column in one table.
I've created the MasterKey, Certificate ...
- 184
0
votes
0
answers
66
views
Is offsite replication from MySQL AWS RDS with encrypted RDS storage possible? How?
AWS RDS for MySQL now supports encrypted storage backends. This encrypts the MySQL data and binlogs with a key within AWS's key management system, thus causing offsite replication issues because we ...
- 13
3
votes
1
answer
319
views
Changing Database Encryption Keys
I have been asked to "rotate" the Certs and Keys for a given database and the only way I knew of to accomplish this was to unencrypt the data first, using DECRYPTION BY CERTIFICATE, create ...
4
votes
1
answer
940
views
Database master key and certificate for backup encryption - SQL Server
I'm trying to understand backup encryption and I have created a master key (in the master DB) and used a password as follows:
USE master;
GO
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'test123!';
GO
...
- 349
1
vote
1
answer
108
views
SQL Server 2019 setting Force Encryption with a script
I have to update 50+ servers to use encrypted connection strings. Is there a way to script setting Force Encryption and TrustServerCertificate (e.g Powershell, or ???) so that I don't have to open ...
- 13
0
votes
2
answers
63
views
Encrypt application name in c# and decrypt in SQL Server
I've encrypted application name in my c# app using MD5, so when constructing the connection string the application name is passed to SQL as encrypted. I would like to decrypt in SQL server the value ...
- 71
1
vote
1
answer
129
views
Incremental encrypted per database backup and Partial restore policy for MySQL 5.7 in replication setup
I will run a replication cluster using MySQL 5.7 and I would like to set up for each database a backup policy that has a full once per day + incremental every N hours with data encrypted (based on the ...
1
vote
2
answers
191
views
SQL Server CLE Encryption Implementation
We got instruction from HQ to implement encryption on our database. The reason be, should a client gets hacked, the hackers cannot access personal info such as names, phone numbers, addresses, etc.
I ...
- 31
0
votes
1
answer
51
views
MySQL Security - Is there an easy way to encrypt a confidential data and also that it cannot view or access by DBA?
Is there an easy way on how can I encrypt a data and store it MySQL database and also it also cannot be viewed by dba?
- 1
-1
votes
1
answer
52
views
Setting up encryption on a SQL2012 Database - how to?
I am not really a DBA, but I have a requirement to set up NIST-approved Encryption on some databases.
Looking around online, there appears to be a few varieties of Encryption for SQL, but the terms ...
3
votes
1
answer
579
views
SSISDB master key in an Availability Group
I activated Always On support for SSIS and everything works fine until a fail over operation happens. Turns out the secondary nodes have a different service master key than the primary node and after ...
0
votes
0
answers
119
views
What does MariaDB use for an encryption initialisation vector?
I have been using MySQL 5.6 in development environment and MariaDB 5.6 in production until I needed to use encryption. MySQL 5.6 has multiple encryption modes and allows AES-256-CBC. MariaDB 5.6 only ...
- 171
1
vote
1
answer
2k
views
How to configure TCPS in JDBC thin client for oracle
An Java Application running with JDBC thin wtih TCP connection, Now require is to convert in TCPS for encryption transmission from application to database.
String url = "jdbc:oracle:thin:@(...
- 111
0
votes
1
answer
164
views
Encryption Test
I'm using PostgreSQL-11 and I've been given a text string to decrypt as a test. I've got the details of how it was encrypted and its very simple. When I try to decrypt using select pgp_sym_decrypt(...
- 17
0
votes
0
answers
174
views
JSONB encryption of specific elements
I have a JSONB object containing lots of elements and nested objects, and some of the elements are to be encrypted, e.g.:
jsonb_obj = '{"obj1" : {"obj2": {"firstname":&...
- 17
0
votes
0
answers
308
views
Postgres SQL CPU and RAM optimisation to improve decryption performance with pg_crypto
I am currently working on an application that requires column-based decryption for a few thousand of rows on a regular basis. The queries are decrypted using pgp_sym_decrypt, where several columns are ...
- 51
0
votes
1
answer
65
views
Can I hide my password for data at rest encryption key?
For MariaDB encryption at-rest, my setting is
[mysqld]
# at-rest encryption
plugin_load_add = file_key_management
file_key_management_filename = /etc/mysql/rest/keyfile.enc
...
- 13