Questions tagged [transparent-data-encryption]
Transparent Data Encryption, a feature used to provide protection for data at rest.
148
questions
1
vote
1
answer
37
views
Understanding of database master key in SQL Server
Let's say I have a production server and I have a database master key ##MS_DatabaseMasterKey## (master_key1) on it. I created a certificate c1, which is encrypted by master_key1 by default. Then I ...
- 602
0
votes
1
answer
15
views
Migrate MSSQL TDE from certificate to EKM
We have a handful of MSSQL databases encrypted using Transparent Data Encryption (TDE) without an HSM.
So the current chain is:
Service Master Key (SMK) ->
Master Key (DMK) ->
...
- 101
0
votes
0
answers
20
views
SQL Server 2016 TDE and Encryption at Host compatibility
As part of a SQL migration to Azure (SQL Server on Azure VMs), the decision was made to implement Azure Disk Encryption (ADE) along with Transparent Disk Encryption (TDE) - a double-whammy setup of ...
- 1
2
votes
1
answer
48
views
RMAN decrypted backup of Oracle TDE encrypted table
I have a Database with Transparent Data Encryption enabled across tablespaces. We have a storage appliance we're using RMAN to backup to which has native encryption, deduplication and compression ...
1
vote
1
answer
50
views
Error states "file is not valid or does not exist; or you do not have permissions" for immediate reimport of files SQL Server just created
We all know that the error "file is not valid or does not exist; or you do not have permissions for it" nearly always means one of two things:
There's a typo in the path or filename
The ...
- 111
0
votes
0
answers
26
views
MariadDB: Hashicorp Vault Encryption Plugin fails to initiate when InnoDB Table Encryption turned on
Have integrated MariaDB 10.6.8-4 with Hashicorp Vault using the hashicorp_key_management.so plugin. With this plugin enabled, things work fine until with innodb_encrypt_log turned on. Also, altering ...
2
votes
1
answer
46
views
What is the purpose of the Encrypt by Password Option in TDE syntax?
The information I have so far is that I can simply do the following to create a valid certificate to use for tde. What good or advantage is the Encrypt with Password = option if I can do it without ...
- 384
0
votes
0
answers
27
views
Has anyone implemented TDE on two node AlwaysOn Cluster with Replication?
Looking for instructions to implement TDE on AlwaysOn with Replication. Current set up is Failover Cluster with Replication. Any gotchas to add TDE and AlwaysOn combination with Replication?
- 327
1
vote
1
answer
126
views
How to Restore to AWS RDS SQL Server from TDE Enabled SQL DB(on-premises) backup file stored in S3
I have a on-premises TDE enabled SQL DB backup file available in S3 along with Cert and Pvt Key files.
How to restore in AWS RDS SQL DB by utilizing the same master key password provided during source ...
- 13
0
votes
0
answers
36
views
Backup with Compression of large TDE databases
I'm looking for help with Backup Compression for TDE databases, I'm working out of SQL 2016 (SP3-CU1) and am aware that the MaxTransferSize must be specified as over 64K. A few these DBs are over ...
0
votes
0
answers
83
views
Migration SQL managed Instance DB to another tenant SQL MI
I am stuck with a SQL migration between 2 tenants. Any help will be really appreciated.
There is one SQL Server managed instance TDE enabled is sitting in one tenant and we have to move the same to a ...
- 1
3
votes
1
answer
138
views
TDE Backups Won't Compress with NOINIT
We run weekly backups of a TDE-enabled database using a command in the following format:
BACKUP DATABASE [DBName] TO DISK = N'C:\Temp\DBName.bak' WITH
FORMAT,
INIT,
MEDIANAME = N'DBName ...
- 131
0
votes
0
answers
39
views
Does Eperi Gateway for Databases still exist?
Is Eperi Gateway for Databases still offered and maintained?
We are interested in implementing TDE (transparent data encryption) on our MariaDB servers in order to have encryption of data at rest. ...
- 148
0
votes
1
answer
175
views
ODA X8-2M crossrestore with TDE wallet fails with: DCS-10001:Internal error encountered: failed to open the tde password based wallet
We are trying to crossrestore a TDE encrypted Oracle Database 19.12 on a new ODA X8-2M.
TDE wallet has been successfully backedup (odacli create-backup -in CDBET015 -c TDEWallet) and transferred to ...
- 898
4
votes
1
answer
200
views
Can't restore a backup of database which has TDE enabled
I'm trying to restore the backup of database which has Transparent Data Encryption enabled. I have verified the certificate thumbprint in the backup file is the same as TDE certificate in [master] ...
- 76
0
votes
1
answer
34
views
Stop Dataguard configuration to test standby database
I would like to know how it would be the correct way in which I should proceed to stop the Dataguard configuration in order to perform a series of tests on the standby database.
It turns out that I ...
- 135
0
votes
0
answers
67
views
MariaDB Encryption at Rest encryption algorithm
I'm trying to find out exactly what encryption algorithm MariaDB uses?
Does the following line in the mysql.cnf file note that the database is encrypted with aes-ctr or is just the encryption used on ...
0
votes
0
answers
19
views
Changing HSM encryption key
A customer is asking us to update its HSM encryption keys that interfaces with its Oracle infrastructure.
Never worked on such thing: I made a quick research on the Oracle docs to understand that HSM ...
- 19
1
vote
1
answer
161
views
SQL Server 2016 Standard Edition TDE
I have Standard Edition of SQL Server 2016.
Is it possible to enable TDE?
I understand that it was an enterprise feature but it is now a feature for SQL 2019 Standard and therefore I wondered if there ...
- 11
0
votes
3
answers
146
views
SQL Server TDE - encryption_state 2 stuck at 100% complete
I have enabled TDE on two databases.
One is around 700 GB and that completed over the night and has encryption_state=3
The other one is almost 2 TB. That one has encryption_state=2 and ...
- 11
0
votes
2
answers
93
views
unknown variable 'file-key-management-filename'
New installation of Debian 10, with MariaDB 10.3.29. Trying to set up encryption-at-rest, but MariaDB won't start due to an error...
[ERROR] /usr/sbin/mysqld: unknown variable 'file-key-management-...
- 1
0
votes
1
answer
182
views
Oracle TDE - opening/closing an encryption wallet
I have a quick question relating to Oracle TDE. Could somebody please explain why both of the following pairs of commands appear to work when opening/closing an ecryption wallet? Is the wallet ...
- 41
0
votes
1
answer
326
views
Oracle 11g TDE wallet autologin
I have setup Oracle TDE for my 11.2.0.4 database. I created the wallet. I created the autologin wallet and everything looked good.
{ORACLE_HOME}/bin/orapki wallet create -wallet cwallet.sso -...
- 41
0
votes
1
answer
33
views
Oracle 11g Encryption
Can somebody please tell me how to encrypt an existing tablespace in 11g? The wallet has been setup and the sqlnet.ora points to it.
SQL> select STATUS FROM V$ENCRYPTION_WALLET;
STATUS
-----------...
- 41
0
votes
1
answer
35
views
Is possible to restore BD SQL Server without key encryption from 2008 R2?
I have a database that has an encryption. The encryption key was lost.
This database is on a SQL Server 2008 R2 server, and my mandate is to migrate this database on a more recent server.
Is there a ...
berodev
1
vote
0
answers
28
views
TDE error when attempting to encrypt a datafile
I'm encountering error
ORA-28374: typed master key not found in wallet
when attempting to run
alter database datafile '+DATA/testdb/datafile/users.2514.1233355332' encrypt;
against an 11g database ...
- 41
0
votes
1
answer
293
views
Is the BACPAC from a TDE encrypted DB also encrypted?
If you create a BACPAC of an encrypted database, will the data in the BACPAC be encrypted?
We're currently using on-prem SQL Server and use TDE to encrypt our customer databases. We also have a ...
- 35
2
votes
2
answers
720
views
is it safe to compress backups for databases with TDE enabled?
I've been reading about this for a long time, and it seems it's not safe to compress a backup when the database has TDE enabled.
is anyone experiencing errors during restore with compressed backups ...
- 7,156
3
votes
3
answers
866
views
Should I backup Master key / Service master key if I'm using TDE?
I've done this in the past, and now I need to do it again. activate TDE.
I remember that I didn't need to restore the master key on the secondary server to restore the database.
And now, as I have bad ...
- 7,156
4
votes
1
answer
255
views
Good practices about Data Encryption
I would like to know (better ideas/best practices...) what can I use to encrypt my data.
I've used TDE in the past and I really don't like it. because if something happens with the certificate, and ...
- 7,156
0
votes
0
answers
384
views
Enabling TDE on Postgres for an existing database
I’m trying to review my options for enabling Transparent Data Encryption on Postgres for an existing database.
The main issue is that we want to enable this but already have an existing database with ...
- 1,625
1
vote
1
answer
428
views
How to restore TDE encrypted DB on AWS (with certificate not stored in master)?
The way Amazon RDS enable TDE feature is to generate a certificate stored in master. However, I need to restore a database that is encrypted by another certificate.
I have the cert file, private key ...
2
votes
0
answers
753
views
SQL Server 2019 and Transparent Data Encryption - Intermittent (silent) Error Log Messages
I recently migrated a SQL Server 2017 TDE database to SQL Server 2019 CU4. I was browsing the Error Log and noticed intermittent messages about
An error occurred while processing log encryption. The ...
- 23.3k
0
votes
1
answer
104
views
Cloning a SQL Server Virtual Machine with TDE
When a virtual machine with a SQL Server database that uses TDE is copied or cloned, will the database be readable on the new instance?
- 151
1
vote
1
answer
219
views
What's the limit of TDE certificates allowed in master database [SQL Server]
Let's say I have a SQL instance with 10k databases that I want to enable TDE using different certificates for each database.
Is there any kind of limit to creating certificates on master database?
...
- 13
0
votes
1
answer
527
views
Oracle 12c. Is it possible to export a TDE encrypted table using expdp / impdp to a database without TDE / wallet enabled?
I have an Oracle 12c database where I have encrypted certain columns of several tables, I want to import or load these tables into another database which does not have TDE enabled, as would be ...
- 135
0
votes
2
answers
4k
views
Oracle 19c cannot create master key
I cannot create master key in oracle 19c...
I set parameter in sqlnet.ora like as:
WALLET_LOCATION=
(SOURCE=
(METHOD=file)
(METHOD_DATA=
(DIRECTORY=/opt/oracle/product/19c/db_home/...
1
vote
0
answers
26
views
In Place Rebuild a TDE Encrypted SQL Server Instance
I have a TDE Encrypted SQL Server machine (with a masterkey, Certs, etc). I need to rebuild this SQL Server onto new hardware, BUT keep the original SQL Server Name. The new box will be named exactly ...
- 49
1
vote
0
answers
132
views
SQL Server 2019 and TDE
We are about to move away from SQL 2008R2 to a much newer version. We upgraded to the Enterprise Edition of 2008R2 just for TDE, but I was just browsing here: https://docs.microsoft.com/en-us/sql/sql-...
- 11
8
votes
1
answer
425
views
Internals of backup compression with TDE (SQL Server)
Does anyone have any (inside?) knowledge of how backup compression works with TDE on SQL Server (version 2016+).
In general I would expect compression of encrypted data to have minimal benefit, ...
- 552
1
vote
1
answer
949
views
SQL Connector for Azure Key Vault - Cannot use more than one key vault
I am using SQL Server 2016 Enterprise Edition with SQL Connector for Azure Key Vault. I am trying to attach more than one Key Vault to my SQL instance but it is not working.
I went through these ...
- 147
4
votes
2
answers
1k
views
SQL TDE and Certificate Handling Recommendations
I've seen the information on this post: But I don't think it answers this particular question/concern:
I have multiple SQL servers with multiple databases. We want to use TDE on a few of them.
...
- 41
6
votes
2
answers
959
views
Turn TDE off when restoring SQL databases
We are just getting started with TDE. Eventually it will be in our Prod SQL Server environment and two major non-prod environments, but currently it is only in one non-prod system.
My question is ...
- 101
2
votes
0
answers
301
views
Where can I find the reason why TDE encryption Scan aborted?
When encrypting large database > 10TB . I had to issue --alter database set encryption on several times , but the encryption starts and fails with the same message in the error log. where can i find ...
- 455
1
vote
1
answer
79
views
Auditing of modification of change to encryption keys
Is it possible to audit/log any attempts or actual changes to the keys used in the encryption hierarchy?
We are using 2014 Enterprise edition and have recently enabled TDE across our databases and ...
- 131
0
votes
0
answers
43
views
How to use tablespace
I am trying to implement Transperent Data Encryption. I am done with setting up the wallet and creating the tablespace.
My doubt is how to specify tablespace so that every object(tables/functions/...
- 101
1
vote
1
answer
139
views
SQL Server TDE Vs SQL Server Database Backups
Can anyone please help me understand below case:
Kindly advise on below case:
SQL Server is on 2014 SP2 GDR version
I read Compression and TDE does not go hand in hand .
I have 2 PRD Environments:...
- 1,574
1
vote
0
answers
126
views
Is there a way to open an encrypted Oracle Database wallet through weblogic JDBC drivers?
I encrypted a column in an Oracle 12c database using the TDE method, The said column was being used in my application, The column becomes unavailable due to the Database wallet being closed.
To open ...
- 33
2
votes
0
answers
50
views
TEMP Database is not showing Encrypted in TDE in SQL Server 2008R2
As per my knowledge, when we encrypt any user database in SQL Server through TDE, the TEMP database automatically gets encrypted.
I have done TDE in SQL Server 2016, and when I check through SELECT ...
- 357
0
votes
1
answer
239
views
SQL Connector for Azure Key Vault - multiple key vaults and keys per instance
In SQL Server 2016 Enterprise Edition, is it possible to link a single instance to more than one Azure key vault / EKM provider? If so, how would I add an additional provider? Any security ...
- 147