Questions tagged [transparent-data-encryption]

Transparent Data Encryption, a feature used to provide protection for data at rest.

Filter by
Sorted by
Tagged with
2
votes
0answers
42 views

TEMP Database is not showing Encrypted in TDE in SQL Server 2008R2

As per my knowledge, when we encrypt any user database in SQL Server through TDE, the TEMP database automatically gets encrypted. I have done TDE in SQL Server 2016, and when I check through SELECT ...
2
votes
0answers
58 views

Mirrored TDE DB Performance

Performing a large index reorg on a mirrored SQL Server 2014 TDE database creates a large redo log on the mirror and the mirroring monitor displays an infinite restore time. The exact same process ...
2
votes
2answers
153 views

Trying to read a log file encrypted by TDE

I have a full chain of full backups and log backups. I am looking to investigate exactly what transaction was done by a certain user in a given period of time. The database (thus all backups) are ...
2
votes
0answers
190 views

Alwayson Database Recovery Failure during TDE encryption

Last week I enabled TDE encryption on my AlwaysOn Availability Group databases of SQL Server 2012. During the encryption of one of the larger databases, bigDB (~200gb) a failover event occurred. Of ...
1
vote
1answer
495 views

Can we use TDE as an anti-injection technique

TDE prevent unauthorized access to the data by restoring the files to another server, because it requires the original encryption certificate and master key. If i applied a table level encryption ...
1
vote
1answer
1k views

Using SQL Server TDE - Encryption 0 percent

I'm using TDE for SQL Server. Querying certificate: select database_name = d.name, dek.encryptor_type, cert_name = c.name from sys.dm_database_encryption_keys dek left join sys.certificates c on dek....
1
vote
2answers
550 views

Encryption in SQL Server 2012/2014

We are hosting sharepoint DBs with AlwaysOn AGs and FCI. My boss asked me what the options for encryption are on the content database, it's backup files and at the column level? I have read about TDE....
1
vote
2answers
693 views

How is the Database Encryption Key for SQL Server TDE linked to the certificate?

The MSDN article on SQL Server TDE states "Create a database encryption key and protect it by the certificate". What does protect mean? The database encryption key is not created from the certificate?
1
vote
1answer
59 views

SQL Server TDE - Database backups and post restore behaviour

Below is my SQL Server details: SQL Server 2014 Enterprise SP2 GDR with Availability Group configured. List item NOTE: The Databases are FileStream Enabled. Below are the series of actions I did ...
1
vote
1answer
165 views

Clarifications on Transparent Data Encryption

This is the first time we are applying TDE on production databases that are critical and I have the questions below. While TDE is in progress: Can we still access the application that is working on ...
1
vote
2answers
150 views

Will TDE encryption protect my SQL database from hacker in this scenario

I'm a bit understand that TDE encryption protect the database from being stolen and read by a hacker. However, I don't understand if it can help me in this scenario: If a hacker got into my server and ...
1
vote
1answer
1k views

Enable TDE When Publishing DACPAC

In the database properties in Visual Studio there is a checkbox for encryption. I'm not sure if I check this if it will enforce encryption when doing a DACPAC deploy. What I would really like to do is ...
1
vote
1answer
99 views

SQL Server TDE Vs SQL Server Database Backups

Can anyone please help me understand below case: Kindly advise on below case: SQL Server is on 2014 SP2 GDR version I read Compression and TDE does not go hand in hand . I have 2 PRD Environments:...
1
vote
2answers
2k views

Change expiry date of TDE certificate of User Database without changing Thumbprint

I have been searching through internet on how to change expiry date of TDE certification of a user database at SQL Server 2014 SP2 and got so many articles and most of them are suggesting to drop and ...
1
vote
1answer
854 views

Is there any approach for encrypting mysql column by key?

I have a scenario for encrypting user information in mysql db. Is there any approach to encrypting column by key. This key information will be there in application configuration file. This key we won'...
1
vote
1answer
364 views

Backup errors after TDE certificate expired and new cert was created with AlwaysOn

I have 2 databases in AlwaysOn with TDE enabled. My TDE cert expired and i created a new one but Ola's Backup script is still failing: EXECUTE [dbo].[DatabaseBackup] @Databases = 'DB1, DB2', @...
1
vote
1answer
2k views

Transactional replication between SQL Server 2014 (Publisher) and SQL Server 2012 (subscriber)

We need to set up transactional replication between two servers A and B, configs listed below: Server A (Publisher) Microsoft SQL Server 2014 - 12.0.2254.0 (X64) Enterprise Edition (64-bit) ...
1
vote
1answer
2k views

Lost DMK encryption password for master database

Back story: My company has TDE encryption enabled for some of our databases. The password that the master key was encrypted by for one of our servers is lost. We do have the backup .key file, however, ...
1
vote
2answers
265 views

SQL TDE and Certificate Handling Recommendations

I've seen the information on this post: But I don't think it answers this particular question/concern: I have multiple SQL servers with multiple databases. We want to use TDE on a few of them. ...
1
vote
1answer
547 views

File permissions for database backups and certificate backups

I have backed up a database and backed up the database master key to the very same folder. Everyone has full access to this folder, however, only the database backup inherits the permissions of the ...
1
vote
2answers
328 views

How do you use pvkconverter.exe - not working for me?

I tried to following this link to convert a .pfx file to the .cer and .pvk file pair. When I run this command: "C:\Program Files (x86)\Microsoft\PVKConverter\PVKConverter.exe" -i TDE_Cert.pfx -o ...
1
vote
1answer
477 views

Restore SQL Server DB encrypted by EKM - where's the asymmetric key?

MS is clear about restoring TDE backups: Certificate has to be restored on destination OR, in case of EKM, the asymmetric key " When moving a TDE protected database, you must also move the ...
1
vote
1answer
573 views

SQL 2016 Always encrypted for all data?

I have been tasked with encrypting all data on an SQL database (SQL 2016 standard). However this doesnt support TDE (Transparent Data Encryption) when I try I get the below error. Transparent Data ...
1
vote
1answer
722 views

How can I prevent our IT admins with sysadmin to read data stored inside an encrypted database? [closed]

I built a web application that stores sensitive data into a SQL Enterprise 2014 database with TDE encryption. My key is safe; I know if someone steals the database file from disk the data is protected....
1
vote
1answer
146 views

AlwaysOn with TDE

Recently, I setup an availability group with 3 nodes. The 2 synchronous nodes are on the same domain, "domain 1". The third asynchronous (DR) node is on a different domain, "domain 2". I have a new ...
1
vote
1answer
40 views

What's the limit of TDE certificates allowed in master database [SQL Server]

Let's say I have a SQL instance with 10k databases that I want to enable TDE using different certificates for each database. Is there any kind of limit to creating certificates on master database? ...
1
vote
0answers
22 views

In Place Rebuild a TDE Encrypted SQL Server Instance

I have a TDE Encrypted SQL Server machine (with a masterkey, Certs, etc). I need to rebuild this SQL Server onto new hardware, BUT keep the original SQL Server Name. The new box will be named exactly ...
1
vote
0answers
64 views

SQL Server 2019 and TDE

We are about to move away from SQL 2008R2 to a much newer version. We upgraded to the Enterprise Edition of 2008R2 just for TDE, but I was just browsing here: https://docs.microsoft.com/en-us/sql/sql-...
1
vote
1answer
157 views

SQL Connector for Azure Key Vault - Cannot use more than one key vault

I am using SQL Server 2016 Enterprise Edition with SQL Connector for Azure Key Vault. I am trying to attach more than one Key Vault to my SQL instance but it is not working. I went through these ...
1
vote
1answer
35 views

Auditing of modification of change to encryption keys

Is it possible to audit/log any attempts or actual changes to the keys used in the encryption hierarchy? We are using 2014 Enterprise edition and have recently enabled TDE across our databases and ...
1
vote
0answers
92 views

Is there a way to open an encrypted Oracle Database wallet through weblogic JDBC drivers?

I encrypted a column in an Oracle 12c database using the TDE method, The said column was being used in my application, The column becomes unavailable due to the Database wallet being closed. To open ...
1
vote
0answers
230 views

Script to automate enabling TDE on any unencypted user databases

I'm looking for a way to automate the encryption of user databases. Ideally this would be a job that can be scheduled to run every night. The job would: find any user database that is not encrypted, ...
1
vote
0answers
29 views

Do any databases other than SAP ASE support key custodians?

SAP Sybase ASE supports the notion of a key custodian. This allows for a setup where the trust can be split between two roles: the database administrator and a key custodian. The database ...
1
vote
1answer
327 views

Cloning a PDB from one CDB into another CDB with TDE enabled at source and target

What are the possible ways to Clone a PDB from one CDB into another CDB (in a different host) with TDE enabled at both source and target. At present i am able to think of the following two a) Data ...
1
vote
0answers
522 views

How to shrink transaction log for a database that was previously in AlwaysOn Availability Group?

I need to move databases having TDE enabled to another instance and re-enable the TDE with a different certificate. Generally, this would not be a problem but I seem to have problems if the databases ...
1
vote
1answer
58 views

encrypting live data in SQL Azure

We are using webjob in azure which imports data every 2 hours into the tables I've created in the cloud. As I read it from here, I can encrypt the db very easily using azure TDE feature. But I am ...
1
vote
0answers
469 views

MySQL Supported versions of MySQL Enterprise TDE

We are bidding for a project involving developing a portal using Liferay, which requires that we use MySQL version 5.5 which is the current compliant version of MySQL with Liferay. We need also use ...
1
vote
1answer
62 views

When would one want to use Oracle transparent data encryption

Oracle TDE features comes with various limitations such as not being able to encrypt columns which are used in foreign key constraints. And probably is available only with enterprise edition which ...
1
vote
2answers
771 views

Databases in Suspect state after enabling TDE

A few of my databases are in a suspect state. How can I get them online? I don’t know what info is relevant and what isn’t, but I’ll give as much as I can. Here is what happened: I enabled TDE in ...
0
votes
1answer
295 views

SQL Server 2008 Database encryption

In my company there is MS SQL SERVER 2008 standard edition installed. My problem is we want to encrypt whole database but in standard edition there is encryption like transparent-data-encryption(TDE) ...
0
votes
1answer
946 views

Under what conditions does SQL Server encrypt tempdb?

When does tempdb get encrypted with Transparent Data Encryption? What configuration, etc, causes tempdb to be encrypted this way?
0
votes
1answer
654 views

Is it (always) necessary to backup a certificate with private key?

I'm starting a project to encrypt database files. I've created a master key and a certificate the following way: USE master; GO CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'Master_K3y'; GO CREATE ...
0
votes
1answer
123 views

Restore fails on unencrypted database

I tried to restore an unencrypted database to a different server and it failed with the error: "Cannot find certificate with thumbprint". This suggests the database is encrypted but it is not. ...
0
votes
1answer
2k views

SQL Server TDE - add master key and certificate [closed]

I want to add multiple master database encryption keys and certificates. Can I do that?
0
votes
1answer
140 views

SQL Connector for Azure Key Vault - multiple key vaults and keys per instance

In SQL Server 2016 Enterprise Edition, is it possible to link a single instance to more than one Azure key vault / EKM provider? If so, how would I add an additional provider? Any security ...
0
votes
1answer
159 views

Enabling TDE on SQL Server AOAG 2014 Databases - Guidance

I am completely new to Transparent Data encryption and please help me on below questions related to enabling the TDE on existing PRODUCTION Databases. Primary Question: What are the things which I ...
0
votes
2answers
219 views

TDE using EKM device

We use an external HSM device to create and store keys and use it for TDE. Our auditors are asking questions about where the keys are store. So obviously the key is stored in the external HSM device. ...
0
votes
1answer
3k views

How can I enable Transparent Data encryption (TDE) on MySQL 5.6

I am looking to perform real-time I/O encryption and decryption on MySQL 5.6 Database. I have few questions to understand Transparent Date Encryption (TDE): Note: I am using AlibabaCloud Can I ...
0
votes
1answer
66 views

Restoring MS SQL TDE database question

I'm new to SQL Server TDE and have a question. I have two VM's (VM1 = Source and VM2 = Target). On the source machine, I executed all the required steps to enable my Test database as well as backing ...
0
votes
1answer
165 views

Using TDE and SQL Server 2016 AlwaysOn Availability Groups

We currently use SQL Server 2012 AG are in process of migrating to SQL 2016. We use EMC SAN for storage and it provides the data encryption at rest on hardware level. Some folks are thinking about ...