Questions tagged [transparent-data-encryption]
Transparent Data Encryption, a feature used to provide protection for data at rest.
136
questions
0
votes
0answers
10 views
Changing HSM encryption key
A customer is asking us to update its HSM encryption keys that interfaces with its Oracle infrastructure.
Never worked on such thing: I made a quick research on the Oracle docs to understand that HSM ...
1
vote
1answer
40 views
SQL Server 2016 Standard Edition TDE
I have Standard Edition of SQL Server 2016.
Is it possible to enable TDE?
I understand that it was an enterprise feature but it is now a feature for SQL 2019 Standard and therefore I wondered if there ...
0
votes
3answers
57 views
SQL Server TDE - encryption_state 2 stuck at 100% complete
I have enabled TDE on two databases.
One is around 700 GB and that completed over the night and has encryption_state=3
The other one is almost 2 TB. That one has encryption_state=2 and ...
0
votes
0answers
20 views
How does SQL Server use Asymmetric Key pair in the EKM to implement TDE?
My understanding of Asymmetric Keys is that it is a public + private key pair. Data encrypted by a public key by partyA can only be decrypted by the private key which partyB owns and never reveals.
In ...
0
votes
1answer
10 views
unknown variable 'file-key-management-filename'
New installation of Debian 10, with MariaDB 10.3.29. Trying to set up encryption-at-rest, but MariaDB won't start due to an error...
[ERROR] /usr/sbin/mysqld: unknown variable 'file-key-management-...
0
votes
1answer
36 views
Oracle TDE - opening/closing an encryption wallet
I have a quick question relating to Oracle TDE. Could somebody please explain why both of the following pairs of commands appear to work when opening/closing an ecryption wallet? Is the wallet ...
0
votes
1answer
72 views
Oracle 11g TDE wallet autologin
I have setup Oracle TDE for my 11.2.0.4 database. I created the wallet. I created the autologin wallet and everything looked good.
{ORACLE_HOME}/bin/orapki wallet create -wallet cwallet.sso -...
0
votes
1answer
19 views
Oracle 11g Encryption
Can somebody please tell me how to encrypt an existing tablespace in 11g? The wallet has been setup and the sqlnet.ora points to it.
SQL> select STATUS FROM V$ENCRYPTION_WALLET;
STATUS
-----------...
0
votes
1answer
23 views
Is possible to restore BD SQL Server without key encryption from 2008 R2?
I have a database that has an encryption. The encryption key was lost.
This database is on a SQL Server 2008 R2 server, and my mandate is to migrate this database on a more recent server.
Is there a ...
1
vote
0answers
18 views
TDE error when attempting to encrypt a datafile
I'm encountering error
ORA-28374: typed master key not found in wallet
when attempting to run
alter database datafile '+DATA/testdb/datafile/users.2514.1233355332' encrypt;
against an 11g database ...
0
votes
0answers
53 views
TDE Encryption Certificate Verification?
I'm attempting to audit/very TDE encryption of a database; significantly I've inherited a bunch of certificates and passwords and I'm attempting to update documentation to properly indicate the ...
0
votes
0answers
47 views
TDE State Changes in Error Logs
I am experiencing some messages in our Error logs on a Development database relating to TDE. This is running on SQL Server 2017 CU21.
[TDE] SetDbeState on DEK 0x0000000000000000: Old State: None (0), ...
0
votes
0answers
5 views
Load from column encrypted ASE database
ASE documents the process to export-import keys when we fully encrypt the database. Once imported, a create query with the same credential on a target allows load from the source database.
But in the ...
0
votes
1answer
137 views
Is the BACPAC from a TDE encrypted DB also encrypted?
If you create a BACPAC of an encrypted database, will the data in the BACPAC be encrypted?
We're currently using on-prem SQL Server and use TDE to encrypt our customer databases. We also have a ...
2
votes
2answers
524 views
is it safe to compress backups for databases with TDE enabled?
I've been reading about this for a long time, and it seems it's not safe to compress a backup when the database has TDE enabled.
is anyone experiencing errors during restore with compressed backups ...
3
votes
3answers
408 views
Should I backup Master key / Service master key if I'm using TDE?
I've done this in the past, and now I need to do it again. activate TDE.
I remember that I didn't need to restore the master key on the secondary server to restore the database.
And now, as I have bad ...
4
votes
1answer
163 views
Good practices about Data Encryption
I would like to know (better ideas/best practices...) what can I use to encrypt my data.
I've used TDE in the past and I really don't like it. because if something happens with the certificate, and ...
0
votes
0answers
180 views
Enabling TDE on Postgres for an existing database
I’m trying to review my options for enabling Transparent Data Encryption on Postgres for an existing database.
The main issue is that we want to enable this but already have an existing database with ...
0
votes
0answers
34 views
A simple question about TDE
I have a question regarding TDE on SQL Server 2017 for example.
I created the master key
Created the certificate
Created the database encryption key ( now the database is encrypted)
Backed up the ...
1
vote
1answer
271 views
How to restore TDE encrypted DB on AWS (with certificate not stored in master)?
The way Amazon RDS enable TDE feature is to generate a certificate stored in master. However, I need to restore a database that is encrypted by another certificate.
I have the cert file, private key ...
1
vote
0answers
335 views
SQL Server 2019 and Transparent Data Encryption - Intermittent (silent) Error Log Messages
I recently migrated a SQL Server 2017 TDE database to SQL Server 2019 CU4. I was browsing the Error Log and noticed intermittent messages about
An error occurred while processing log encryption. The ...
0
votes
1answer
60 views
Cloning a SQL Server Virtual Machine with TDE
When a virtual machine with a SQL Server database that uses TDE is copied or cloned, will the database be readable on the new instance?
1
vote
1answer
137 views
What's the limit of TDE certificates allowed in master database [SQL Server]
Let's say I have a SQL instance with 10k databases that I want to enable TDE using different certificates for each database.
Is there any kind of limit to creating certificates on master database?
...
0
votes
1answer
375 views
Oracle 12c. Is it possible to export a TDE encrypted table using expdp / impdp to a database without TDE / wallet enabled?
I have an Oracle 12c database where I have encrypted certain columns of several tables, I want to import or load these tables into another database which does not have TDE enabled, as would be ...
0
votes
2answers
2k views
Oracle 19c cannot create master key
I cannot create master key in oracle 19c...
I set parameter in sqlnet.ora like as:
WALLET_LOCATION=
(SOURCE=
(METHOD=file)
(METHOD_DATA=
(DIRECTORY=/opt/oracle/product/19c/db_home/...
1
vote
0answers
25 views
In Place Rebuild a TDE Encrypted SQL Server Instance
I have a TDE Encrypted SQL Server machine (with a masterkey, Certs, etc). I need to rebuild this SQL Server onto new hardware, BUT keep the original SQL Server Name. The new box will be named exactly ...
1
vote
0answers
115 views
SQL Server 2019 and TDE
We are about to move away from SQL 2008R2 to a much newer version. We upgraded to the Enterprise Edition of 2008R2 just for TDE, but I was just browsing here: https://docs.microsoft.com/en-us/sql/sql-...
8
votes
1answer
384 views
Internals of backup compression with TDE (SQL Server)
Does anyone have any (inside?) knowledge of how backup compression works with TDE on SQL Server (version 2016+).
In general I would expect compression of encrypted data to have minimal benefit, ...
1
vote
1answer
603 views
SQL Connector for Azure Key Vault - Cannot use more than one key vault
I am using SQL Server 2016 Enterprise Edition with SQL Connector for Azure Key Vault. I am trying to attach more than one Key Vault to my SQL instance but it is not working.
I went through these ...
3
votes
2answers
795 views
SQL TDE and Certificate Handling Recommendations
I've seen the information on this post: But I don't think it answers this particular question/concern:
I have multiple SQL servers with multiple databases. We want to use TDE on a few of them.
...
6
votes
2answers
802 views
Turn TDE off when restoring SQL databases
We are just getting started with TDE. Eventually it will be in our Prod SQL Server environment and two major non-prod environments, but currently it is only in one non-prod system.
My question is ...
2
votes
0answers
220 views
Where can I find the reason why TDE encryption Scan aborted?
When encrypting large database > 10TB . I had to issue --alter database set encryption on several times , but the encryption starts and fails with the same message in the error log. where can i find ...
1
vote
1answer
73 views
Auditing of modification of change to encryption keys
Is it possible to audit/log any attempts or actual changes to the keys used in the encryption hierarchy?
We are using 2014 Enterprise edition and have recently enabled TDE across our databases and ...
0
votes
0answers
38 views
How to use tablespace
I am trying to implement Transperent Data Encryption. I am done with setting up the wallet and creating the tablespace.
My doubt is how to specify tablespace so that every object(tables/functions/...
1
vote
1answer
128 views
SQL Server TDE Vs SQL Server Database Backups
Can anyone please help me understand below case:
Kindly advise on below case:
SQL Server is on 2014 SP2 GDR version
I read Compression and TDE does not go hand in hand .
I have 2 PRD Environments:...
1
vote
0answers
111 views
Is there a way to open an encrypted Oracle Database wallet through weblogic JDBC drivers?
I encrypted a column in an Oracle 12c database using the TDE method, The said column was being used in my application, The column becomes unavailable due to the Database wallet being closed.
To open ...
2
votes
0answers
43 views
TEMP Database is not showing Encrypted in TDE in SQL Server 2008R2
As per my knowledge, when we encrypt any user database in SQL Server through TDE, the TEMP database automatically gets encrypted.
I have done TDE in SQL Server 2016, and when I check through SELECT ...
0
votes
1answer
203 views
SQL Connector for Azure Key Vault - multiple key vaults and keys per instance
In SQL Server 2016 Enterprise Edition, is it possible to link a single instance to more than one Azure key vault / EKM provider? If so, how would I add an additional provider? Any security ...
4
votes
1answer
7k views
How to change SQL Server master key password?
I created a master key, then a certificate and encrypted my database.
CREATE MASTER KEY ENCRYPTION
BY PASSWORD='A Very Strong Password';
GO
CREATE CERTIFICATE foo
WITH
SUBJECT='Database Encryption ...
1
vote
1answer
1k views
File permissions for database backups and certificate backups
I have backed up a database and backed up the database master key to the very same folder. Everyone has full access to this folder, however, only the database backup inherits the permissions of the ...
7
votes
1answer
794 views
TDE Master Key Rotation
Does changing the TDE Master Key (DB Master Key and/or the DB encryption key) always require decryption and re-encryption? If not, at what version did SQL Server begin to allow you to change the ...
5
votes
2answers
686 views
Database Encryption scan for database <name> was aborted. Reissue ALTER DB to resume the scan
I disabled TDE on a database and once completed I dropped the DB certificate for it. Later I performed a manual failover to node2 and ran steps to enable TDE once again. However encryption state is ...
0
votes
0answers
310 views
TDE Enabled DB Always Going Into "Recovery Pending" on Secondary Node [duplicate]
I have a Windows Failover Cluster set up with SQL 2016 Enterprise SP2. TDE was implemented on a DB, on node1 the DB is able to start without issues. However, when a failover occurs, on node2 the DB ...
1
vote
1answer
74 views
SQL Server TDE - Database backups and post restore behaviour
Below is my SQL Server details:
SQL Server 2014 Enterprise SP2 GDR with Availability Group configured.
List item
NOTE: The Databases are FileStream Enabled.
Below are the series of actions I did ...
0
votes
1answer
53 views
using oracle tde
I am new to using oracle database. I want to encrypt data stored in oracle. I am using oracle 18c for this and using TDE(Transparent Data Encryption) feature for it. However, when I run select query ...
1
vote
1answer
341 views
Clarifications on Transparent Data Encryption
This is the first time we are applying TDE on production databases that are critical and I have the questions below.
While TDE is in progress:
Can we still access the application that is working on ...
1
vote
2answers
191 views
Will TDE encryption protect my SQL database from hacker in this scenario
I'm a bit understand that TDE encryption protect the database from being stolen and read by a hacker. However, I don't understand if it can help me in this scenario: If a hacker got into my server and ...
1
vote
2answers
693 views
How do you use pvkconverter.exe - not working for me?
I tried to following this link to convert a .pfx file to the .cer and .pvk file pair.
When I run this command:
"C:\Program Files (x86)\Microsoft\PVKConverter\PVKConverter.exe" -i TDE_Cert.pfx -o ...
0
votes
1answer
69 views
Data Security in MS SQL Server
How do I store the sensitive information on SQL server?. We have policy guidelines, DBA and Development engineers are not allowed to view the data as plain text.
I am aware of the encryption ...
0
votes
1answer
629 views
Generate the statistics of a table after truncating it and then repopulate it?
Is it necessary to generate the statistics of a table after truncating it and then repopulate it?
I have a table with several million rows in Oracle.Every week new data is recharged, truncating the ...