As of May 31, 2023, we have updated our Code of Conduct.

Questions tagged [hsm]

Hardware Security Module

Filter by
Sorted by
Tagged with
-1 votes
1 answer
17 views

TDE setup with EMK in SQL SERVER 2019

We are implementing TDE in MS SQL SEREVR 2019 with EKM provider. We are using asymmetric key to encrypt the data at rest. Asymmetric key will be hosted in HSM appliances. I have one questions ...
sam patrick's user avatar
0 votes
1 answer
123 views

Migrate MSSQL TDE from certificate to EKM

We have a handful of MSSQL databases encrypted using Transparent Data Encryption (TDE) without an HSM. So the current chain is:  Service Master Key (SMK) ->   Master Key (DMK) ->  ...
Brain2000's user avatar
  • 103
1 vote
1 answer
966 views

Restore SQL Server DB encrypted by EKM - where's the asymmetric key?

MS is clear about restoring TDE backups: Certificate has to be restored on destination OR, in case of EKM, the asymmetric key " When moving a TDE protected database, you must also move the ...
Mada's user avatar
  • 11
1 vote
0 answers
528 views

Connection to HSM Lost

We are testing a particular HSM to use replace the Oracle wallet and user as a key-store for column encryption. We are using redundant HSMs so that things will continue to run even with a complete ...
Leigh Riffel's user avatar
  • 23.8k
1 vote
1 answer
2k views

searching against decrypted column

I'm using Postgres on AWS RDS. My application is encrypting selected columns in a table using AWS KMS encryption. I tried but could not find a way to configure KMS keys and use the decrypt() in ...
Java Spring Coder's user avatar
3 votes
1 answer
211 views

Allow refresh of lower environment from production when using a HSM

We currently use an Oracle Wallet for Transparent Data Encryption of certain critical columns and are migrating to a HSM for compliance reasons. Our issue is how to handle encryption on the ...
Leigh Riffel's user avatar
  • 23.8k
4 votes
3 answers
7k views

Open source & cheap 'data at rest' encryption solutions

So I am exploring some options about database encryption. The best options are commercial (TDE). I am looking for an open-source implementation. Recent releases of MySQL and MariaDB have data-at-rest ...
paradoxical81's user avatar