Questions tagged [transparent-data-encryption]
Transparent Data Encryption, a feature used to provide protection for data at rest.
0
votes
0answers
34 views
SQL Server TDE Vs SQL Server Database Backups
Can anyone please help me understand below case:
Kindly advise on below case:
SQL Server is on 2014 SP2 GDR version
I read Compression and TDE does not go hand in hand .
I have 2 PRD Environments:...
1
vote
0answers
29 views
Is there a way to open an encrypted Oracle Database wallet through weblogic JDBC drivers?
I encrypted a column in an Oracle 12c database using the TDE method, The said column was being used in my application, The column becomes unavailable due to the Database wallet being closed.
To open ...
2
votes
0answers
30 views
TEMP Database is not showing Encrypted in TDE in SQL Server 2008R2
As per my knowledge, when we encrypt any user database in SQL Server through TDE, the TEMP database automatically gets encrypted.
I have done TDE in SQL Server 2016, and when I check through SELECT ...
0
votes
1answer
17 views
SQL Connector for Azure Key Vault - multiple key vaults and keys per instance
In SQL Server 2016 Enterprise Edition, is it possible to link a single instance to more than one Azure key vault / EKM provider? If so, how would I add an additional provider? Any security ...
1
vote
1answer
44 views
How to change SQL Server master key password?
I created a master key, then a certificate and encrypted my database.
CREATE MASTER KEY ENCRYPTION
BY PASSWORD='A Very Strong Password';
GO
CREATE CERTIFICATE foo
WITH
SUBJECT='Database Encryption ...
1
vote
1answer
55 views
File permissions for database backups and certificate backups
I have backed up a database and backed up the database master key to the very same folder. Everyone has full access to this folder, however, only the database backup inherits the permissions of the ...
6
votes
1answer
238 views
TDE Master Key Rotation
Does changing the TDE Master Key (DB Master Key and/or the DB encryption key) always require decryption and re-encryption? If not, at what version did SQL Server begin to allow you to change the ...
5
votes
2answers
72 views
Database Encryption scan for database <name> was aborted. Reissue ALTER DB to resume the scan
I disabled TDE on a database and once completed I dropped the DB certificate for it. Later I performed a manual failover to node2 and ran steps to enable TDE once again. However encryption state is ...
0
votes
0answers
11 views
How many keys does wallet keystore have?
I my scenario I have configure transparent data encryption with password based
software keystore only for example 'ewallet.p12' and create a master key for software keystore.
I want to know can we ...
0
votes
0answers
47 views
TDE Enabled DB Always Going Into “Recovery Pending” on Secondary Node [duplicate]
I have a Windows Failover Cluster set up with SQL 2016 Enterprise SP2. TDE was implemented on a DB, on node1 the DB is able to start without issues. However, when a failover occurs, on node2 the DB ...
1
vote
1answer
38 views
SQL Server TDE - Database backups and post restore behaviour
Below is my SQL Server details:
SQL Server 2014 Enterprise SP2 GDR with Availability Group configured.
List item
NOTE: The Databases are FileStream Enabled.
Below are the series of actions I did ...
0
votes
1answer
33 views
using oracle tde
I am new to using oracle database. I want to encrypt data stored in oracle. I am using oracle 18c for this and using TDE(Transparent Data Encryption) feature for it. However, when I run select query ...
1
vote
1answer
58 views
Clarifications on Transparent Data Encryption
This is the first time we are applying TDE on production databases that are critical and I have the questions below.
While TDE is in progress:
Can we still access the application that is working on ...
0
votes
0answers
121 views
Change Encryption Wallet type from PASSWORD to AUTOLOGIN
I am currently working on an Oracle 18.3 DB and I have a script which allows me to create an encrypted seed PDB. As part of this script, we encrypt the system tablespaces (like SYSTEM, SYSAUX, and ...
0
votes
2answers
45 views
Will TDE encryption protect my SQL database from hacker in this scenario
I'm a bit understand that TDE encryption protect the database from being stolen and read by a hacker. However, I don't understand if it can help me in this scenario: If a hacker got into my server and ...
0
votes
1answer
82 views
How do you use pvkconverter.exe - not working for me?
I tried to following this link to convert a .pfx file to the .cer and .pvk file pair.
When I run this command,
"C:\Program Files (x86)\Microsoft\PVKConverter\PVKConverter.exe" -i TDE_Cert.pfx -o ...
0
votes
1answer
44 views
Data Security in MS SQL Server
How do I store the sensitive information on SQL server?. We have policy guidelines, DBA and Development engineers are not allowed to view the data as plain text.
I am aware of the encryption ...
0
votes
1answer
81 views
Generate the statistics of a table after truncating it and then repopulate it?
Is it necessary to generate the statistics of a table after truncating it and then repopulate it?
I have a table with several million rows in Oracle.Every week new data is recharged, truncating the ...
0
votes
1answer
37 views
Restore fails on unencrypted database
I tried to restore an unencrypted database to a different server and it failed with the error:
"Cannot find certificate with thumbprint".
This suggests the database is encrypted but it is not. ...
3
votes
2answers
39 views
I only have backup of a TDE encrypted SQL Server database--can it be restored it to another server?
My situation is little weird--I have no access to the source database server, but I do have the database backups of a database that is encrypted with TDE. When I restore it to another server, I am ...
0
votes
0answers
76 views
Enabling TDE on PRODUCTION Servers - Guidance , Suggestions and Testing TDE ways
First of all just want to say , I am completely new to Transparent Data Encryption.
Can I get some guidance on things to keep in mind while I am enabling TDE on Critical PRODUCTION Servers. I have ...
1
vote
0answers
87 views
Script to automate enabling TDE on any unencypted user databases
I'm looking for a way to automate the encryption of user databases. Ideally this would be a job that can be scheduled to run every night. The job would: find any user database that is not encrypted, ...
0
votes
1answer
85 views
Enabling TDE on SQL Server AOAG 2014 Databases - Guidance
I am completely new to Transparent Data encryption and please help me on below questions related to enabling the TDE on existing PRODUCTION Databases.
Primary Question:
What are the things which I ...
5
votes
2answers
237 views
Best practice around non-production databases refreshes and TDE
Say we have a production system with several databases encrypted using TDE and a self-generated certificate.
We regularly need to take this database and refresh our non-production systems. This ...
0
votes
2answers
67 views
TDE using EKM device
We use an external HSM device to create and store keys and use it for TDE.
Our auditors are asking questions about where the keys are store. So obviously the key is stored in the external HSM device. ...
0
votes
1answer
580 views
How can I enable Transparent Data encryption (TDE) on MySQL 5.6
I am looking to perform real-time I/O encryption and decryption on MySQL 5.6 Database. I have few questions to understand Transparent Date Encryption (TDE):
Note: I am using AlibabaCloud
Can I ...
0
votes
1answer
56 views
Restoring MS SQL TDE database question
I'm new to SQL Server TDE and have a question.
I have two VM's (VM1 = Source and VM2 = Target). On the source machine, I executed all the required steps to enable my Test database as well as backing ...
0
votes
1answer
163 views
Disabling TDE on AlwaysOn database
Which are the correct steps to disable (not removing) TDE on a AlwaysOn database in an availability group?
I found steps for removing TDE but that involves removing the availability group and ...
2
votes
0answers
45 views
Mirrored TDE DB Performance
Performing a large index reorg on a mirrored SQL Server 2014 TDE database creates a large redo log on the mirror and the mirroring monitor displays an infinite restore time. The exact same process ...
1
vote
2answers
572 views
Change expiry date of TDE certificate of User Database without changing Thumbprint
I have been searching through internet on how to change expiry date of TDE certification of a user database at SQL Server 2014 SP2 and got so many articles and most of them are suggesting to drop and ...
-3
votes
1answer
356 views
Disadvantages of TDE [closed]
Is there any effect at the application end, if you configure TDE for Production databases, which are in both replication and Always On Availability Groups in SQL Server 2014 Enterprise Edition?
This ...
0
votes
1answer
203 views
SQL Server 2008 Database encryption
In my company there is MS SQL SERVER 2008 standard edition installed.
My problem is we want to encrypt whole database but in standard edition there is encryption like transparent-data-encryption(TDE) ...
2
votes
2answers
53 views
Trying to read a log file encrypted by TDE
I have a full chain of full backups and log backups. I am looking to investigate exactly what transaction was done by a certain user in a given period of time.
The database (thus all backups) are ...
0
votes
0answers
12 views
How can I confim that Master encryption key is created in Oracle TDE?
I create Master encryption key using ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY "key_agent_password"; on external keystore but Since I don't have any element eg. Keyname or KeyID to match, how ...
3
votes
1answer
265 views
TDE enabled database backup taking too long
We have recently implemented TDE and backup compression is also enabled. Before TDE backup used to take about 20min but now it takes about one hour.
I have set @MaxTransferSize to 3MB, 2MB, 1MB and ...
0
votes
1answer
13 views
Alternatives to User Defined Performance Counters for CPU Monitoring - SQL 2014
I want to monitor CPU usage before implementing TDE on several production SQL Servers.
My plan was to use user defined performance counters, over a period of a couple of days, counters as defined ...
1
vote
1answer
241 views
Restore SQL Server DB encrypted by EKM - where's the asymmetric key?
MS is clear about restoring TDE backups: Certificate has to be restored on destination OR, in case of EKM, the asymmetric key
"
When moving a TDE protected database, you must also move the ...
0
votes
1answer
171 views
Is it (always) necessary to backup a certificate with private key?
I'm starting a project to encrypt database files. I've created a master key and a certificate the following way:
USE master;
GO
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'Master_K3y';
GO
CREATE ...
1
vote
1answer
191 views
Is there any approach for encrypting mysql column by key?
I have a scenario for encrypting user information in mysql db. Is there any approach to encrypting column by key. This key information will be there in application configuration file. This key we won'...
3
votes
1answer
1k views
Microsoft SQL Server 2016 Service Pack 1 (SP1) support for TDE (transparent data encryption)
Does Microsoft SQL Server 2016 Service Pack 1 add support for TDE (Transparent Data Encryption) to Standard Edition as well?
As per What's new in Database Engine - SQL Server 2016 and A Big Deal : ...
0
votes
1answer
134 views
Using TDE and SQL Server 2016 AlwaysOn Availability Groups
We currently use SQL Server 2012 AG are in process of migrating to SQL 2016. We use EMC SAN for storage and it provides the data encryption at rest on hardware level. Some folks are thinking about ...
1
vote
0answers
21 views
Do any databases other than SAP ASE support key custodians?
SAP Sybase ASE supports the notion of a key custodian. This allows for a setup where the trust can be split between two roles: the database administrator and a key custodian. The database ...
1
vote
1answer
226 views
Backup errors after TDE certificate expired and new cert was created with AlwaysOn
I have 2 databases in AlwaysOn with TDE enabled.
My TDE cert expired and i created a new one but Ola's Backup script is still failing:
EXECUTE [dbo].[DatabaseBackup]
@Databases = 'DB1, DB2',
@...
13
votes
1answer
488 views
Backup Compression Causing Corruption In SQL 2017 TDE Database
On SQL Server 2017 (CU3), whenever I enable backup compression on one of my TDE databases, the backup process always corrupts a specific page in the database. If I run the backup without compression, ...
1
vote
1answer
399 views
SQL 2016 Always encrypted for all data?
I have been tasked with encrypting all data on an SQL database (SQL 2016 standard).
However this doesnt support TDE (Transparent Data Encryption) when I try I get the below error.
Transparent Data ...
1
vote
1answer
211 views
Cloning a PDB from one CDB into another CDB with TDE enabled at source and target
What are the possible ways to Clone a PDB from one CDB into another CDB (in a different host) with TDE enabled at both source and target.
At present i am able to think of the following two
a) Data ...
4
votes
1answer
822 views
TDE Encryption on database tripled size of backup files
After enabling TDE Encryption my database backup file .bak is 3x larger than before. Is there a way to improve this? Is this due to compression not being as efficient on an encrypted file?
7
votes
1answer
2k views
BACKUP MASTER KEY failing with cannot find symmetric master key because it does not exist
I'm trying to backup the master key for a TDE database, but SQL Server says there isn't one. It's a bit weird, but I'm sure I'm just doing something wrong. I'm sysadmin on the server, so I should be ...
3
votes
1answer
908 views
TDE cannot encrypt database
In order to encrypt a SQL db, I run the following commands:
CREATE CERTIFICATE <certname> ENCRYPTION BY PASSWORD = '<UseStrongPasswordHere>'
WITH SUBJECT = 'certificate subject', ...
5
votes
1answer
113 views
Swapping TDE Cert Slow, any way to improve performance?
Fair warning, I am very new to encryption with DBs. Right now we use the following statement to swap certificates when in the process backing/restoring DBs between servers:
ALTER DATABASE ENCRYPTION ...
