Questions tagged [transparent-data-encryption]

Transparent Data Encryption, a feature used to provide protection for data at rest.

Filter by
Sorted by
Tagged with
2
votes
2answers
237 views

Trying to read a log file encrypted by TDE

I have a full chain of full backups and log backups. I am looking to investigate exactly what transaction was done by a certain user in a given period of time. The database (thus all backups) are ...
0
votes
0answers
47 views

TDE State Changes in Error Logs

I am experiencing some messages in our Error logs on a Development database relating to TDE. This is running on SQL Server 2017 CU21. [TDE] SetDbeState on DEK 0x0000000000000000: Old State: None (0), ...
1
vote
1answer
40 views

SQL Server 2016 Standard Edition TDE

I have Standard Edition of SQL Server 2016. Is it possible to enable TDE? I understand that it was an enterprise feature but it is now a feature for SQL 2019 Standard and therefore I wondered if there ...
0
votes
3answers
57 views

SQL Server TDE - encryption_state 2 stuck at 100% complete

I have enabled TDE on two databases. One is around 700 GB and that completed over the night and has encryption_state=3 The other one is almost 2 TB. That one has encryption_state=2 and ...
5
votes
2answers
684 views

Database Encryption scan for database <name> was aborted. Reissue ALTER DB to resume the scan

I disabled TDE on a database and once completed I dropped the DB certificate for it. Later I performed a manual failover to node2 and ran steps to enable TDE once again. However encryption state is ...
0
votes
1answer
36 views

Oracle TDE - opening/closing an encryption wallet

I have a quick question relating to Oracle TDE. Could somebody please explain why both of the following pairs of commands appear to work when opening/closing an ecryption wallet? Is the wallet ...
0
votes
0answers
20 views

How does SQL Server use Asymmetric Key pair in the EKM to implement TDE?

My understanding of Asymmetric Keys is that it is a public + private key pair. Data encrypted by a public key by partyA can only be decrypted by the private key which partyB owns and never reveals. In ...
0
votes
1answer
10 views

unknown variable 'file-key-management-filename'

New installation of Debian 10, with MariaDB 10.3.29. Trying to set up encryption-at-rest, but MariaDB won't start due to an error... [ERROR] /usr/sbin/mysqld: unknown variable 'file-key-management-...
2
votes
1answer
395 views

Cloning a PDB from one CDB into another CDB with TDE enabled at source and target

What are the possible ways to Clone a PDB from one CDB into another CDB (in a different host) with TDE enabled at both source and target. At present i am able to think of the following two a) Data ...
1
vote
1answer
268 views

How to restore TDE encrypted DB on AWS (with certificate not stored in master)?

The way Amazon RDS enable TDE feature is to generate a certificate stored in master. However, I need to restore a database that is encrypted by another certificate. I have the cert file, private key ...
3
votes
1answer
3k views

Microsoft SQL Server 2016 Service Pack 1 (SP1) support for TDE (transparent data encryption)

Does Microsoft SQL Server 2016 Service Pack 1 add support for TDE (Transparent Data Encryption) to Standard Edition as well? As per What's new in Database Engine - SQL Server 2016 and A Big Deal : ...
0
votes
1answer
69 views

Oracle 11g TDE wallet autologin

I have setup Oracle TDE for my 11.2.0.4 database. I created the wallet. I created the autologin wallet and everything looked good. {ORACLE_HOME}/bin/orapki wallet create -wallet cwallet.sso -...
0
votes
1answer
19 views

Oracle 11g Encryption

Can somebody please tell me how to encrypt an existing tablespace in 11g? The wallet has been setup and the sqlnet.ora points to it. SQL> select STATUS FROM V$ENCRYPTION_WALLET; STATUS -----------...
0
votes
1answer
22 views

Is possible to restore BD SQL Server without key encryption from 2008 R2?

I have a database that has an encryption. The encryption key was lost. This database is on a SQL Server 2008 R2 server, and my mandate is to migrate this database on a more recent server. Is there a ...
1
vote
0answers
18 views

TDE error when attempting to encrypt a datafile

I'm encountering error ORA-28374: typed master key not found in wallet when attempting to run alter database datafile '+DATA/testdb/datafile/users.2514.1233355332' encrypt; against an 11g database ...
0
votes
0answers
53 views

TDE Encryption Certificate Verification?

I'm attempting to audit/very TDE encryption of a database; significantly I've inherited a bunch of certificates and passwords and I'm attempting to update documentation to properly indicate the ...
0
votes
0answers
5 views

Load from column encrypted ASE database

ASE documents the process to export-import keys when we fully encrypt the database. Once imported, a create query with the same credential on a target allows load from the source database. But in the ...
19
votes
2answers
60k views

Query to List Encryption Certificate for Databases

What certificate is being used to encrypt each of the databases on the instances. I can get the data using the following but how do I write the queries USE master GO -- this provides the list of ...
0
votes
1answer
135 views

Is the BACPAC from a TDE encrypted DB also encrypted?

If you create a BACPAC of an encrypted database, will the data in the BACPAC be encrypted? We're currently using on-prem SQL Server and use TDE to encrypt our customer databases. We also have a ...
2
votes
2answers
519 views

is it safe to compress backups for databases with TDE enabled?

I've been reading about this for a long time, and it seems it's not safe to compress a backup when the database has TDE enabled. is anyone experiencing errors during restore with compressed backups ...
3
votes
3answers
405 views

Should I backup Master key / Service master key if I'm using TDE?

I've done this in the past, and now I need to do it again. activate TDE. I remember that I didn't need to restore the master key on the secondary server to restore the database. And now, as I have bad ...
6
votes
2answers
2k views

Should you encrypt the system databases?

A finding from a STIG evaluation, CCE-19832-5 reports that the [master] database should be encrypted with a Database Master Key using an encrypted password that meets DoD standards. This a result of ...
1
vote
1answer
62 views

encrypting live data in SQL Azure

We are using webjob in azure which imports data every 2 hours into the tables I've created in the cloud. As I read it from here, I can encrypt the db very easily using azure TDE feature. But I am ...
4
votes
1answer
163 views

Good practices about Data Encryption

I would like to know (better ideas/best practices...) what can I use to encrypt my data. I've used TDE in the past and I really don't like it. because if something happens with the certificate, and ...
0
votes
0answers
175 views

Enabling TDE on Postgres for an existing database

I’m trying to review my options for enabling Transparent Data Encryption on Postgres for an existing database. The main issue is that we want to enable this but already have an existing database with ...
2
votes
1answer
431 views

Script to automate enabling TDE on any unencypted user databases

I'm looking for a way to automate the encryption of user databases. Ideally this would be a job that can be scheduled to run every night. The job would: find any user database that is not encrypted, ...
0
votes
2answers
2k views

Oracle 19c cannot create master key

I cannot create master key in oracle 19c... I set parameter in sqlnet.ora like as: WALLET_LOCATION= (SOURCE= (METHOD=file) (METHOD_DATA= (DIRECTORY=/opt/oracle/product/19c/db_home/...
4
votes
1answer
7k views

How to change SQL Server master key password?

I created a master key, then a certificate and encrypted my database. CREATE MASTER KEY ENCRYPTION BY PASSWORD='A Very Strong Password'; GO CREATE CERTIFICATE foo WITH SUBJECT='Database Encryption ...
0
votes
0answers
34 views

A simple question about TDE

I have a question regarding TDE on SQL Server 2017 for example. I created the master key Created the certificate Created the database encryption key ( now the database is encrypted) Backed up the ...
1
vote
0answers
329 views

SQL Server 2019 and Transparent Data Encryption - Intermittent (silent) Error Log Messages

I recently migrated a SQL Server 2017 TDE database to SQL Server 2019 CU4. I was browsing the Error Log and noticed intermittent messages about An error occurred while processing log encryption. The ...
3
votes
2answers
787 views

SQL TDE and Certificate Handling Recommendations

I've seen the information on this post: But I don't think it answers this particular question/concern: I have multiple SQL servers with multiple databases. We want to use TDE on a few of them. ...
6
votes
2answers
3k views

TDE on replicated databases

I have implemented Transactional replication between two databases. Now I have to implement Transparent Data Encryption (TDE) on the Publisher database. Is it possible to implement TDE in the master ...
0
votes
1answer
60 views

Cloning a SQL Server Virtual Machine with TDE

When a virtual machine with a SQL Server database that uses TDE is copied or cloned, will the database be readable on the new instance?
10
votes
3answers
1k views

Unable to restore TDE enabled database when MAXTRANSFERSIZE and CHECKSUM is used

Update: @AmitBanerjee - Senior Program Manager for the Microsoft SQL Server Product Group confirmed that MS will look into the issue as it is a defect. Has anyone encountered issue restoring backups ...
0
votes
1answer
372 views

Oracle 12c. Is it possible to export a TDE encrypted table using expdp / impdp to a database without TDE / wallet enabled?

I have an Oracle 12c database where I have encrypted certain columns of several tables, I want to import or load these tables into another database which does not have TDE enabled, as would be ...
1
vote
1answer
136 views

What's the limit of TDE certificates allowed in master database [SQL Server]

Let's say I have a SQL instance with 10k databases that I want to enable TDE using different certificates for each database. Is there any kind of limit to creating certificates on master database? ...
0
votes
1answer
772 views

Disabling TDE on AlwaysOn database

Which are the correct steps to disable (not removing) TDE on a AlwaysOn database in an availability group? I found steps for removing TDE but that involves removing the availability group and ...
1
vote
2answers
693 views

How do you use pvkconverter.exe - not working for me?

I tried to following this link to convert a .pfx file to the .cer and .pvk file pair. When I run this command: "C:\Program Files (x86)\Microsoft\PVKConverter\PVKConverter.exe" -i TDE_Cert.pfx -o ...
1
vote
2answers
190 views

Will TDE encryption protect my SQL database from hacker in this scenario

I'm a bit understand that TDE encryption protect the database from being stolen and read by a hacker. However, I don't understand if it can help me in this scenario: If a hacker got into my server and ...
1
vote
0answers
25 views

In Place Rebuild a TDE Encrypted SQL Server Instance

I have a TDE Encrypted SQL Server machine (with a masterkey, Certs, etc). I need to rebuild this SQL Server onto new hardware, BUT keep the original SQL Server Name. The new box will be named exactly ...
1
vote
0answers
115 views

SQL Server 2019 and TDE

We are about to move away from SQL 2008R2 to a much newer version. We upgraded to the Enterprise Edition of 2008R2 just for TDE, but I was just browsing here: https://docs.microsoft.com/en-us/sql/sql-...
8
votes
1answer
384 views

Internals of backup compression with TDE (SQL Server)

Does anyone have any (inside?) knowledge of how backup compression works with TDE on SQL Server (version 2016+). In general I would expect compression of encrypted data to have minimal benefit, ...
1
vote
1answer
599 views

SQL Connector for Azure Key Vault - Cannot use more than one key vault

I am using SQL Server 2016 Enterprise Edition with SQL Connector for Azure Key Vault. I am trying to attach more than one Key Vault to my SQL instance but it is not working. I went through these ...
6
votes
2answers
802 views

Turn TDE off when restoring SQL databases

We are just getting started with TDE. Eventually it will be in our Prod SQL Server environment and two major non-prod environments, but currently it is only in one non-prod system. My question is ...
2
votes
0answers
220 views

Where can I find the reason why TDE encryption Scan aborted?

When encrypting large database > 10TB . I had to issue --alter database set encryption on several times , but the encryption starts and fails with the same message in the error log. where can i find ...
0
votes
1answer
184 views

Using TDE and SQL Server 2016 AlwaysOn Availability Groups

We currently use SQL Server 2012 AG are in process of migrating to SQL 2016. We use EMC SAN for storage and it provides the data encryption at rest on hardware level. Some folks are thinking about ...
1
vote
1answer
73 views

Auditing of modification of change to encryption keys

Is it possible to audit/log any attempts or actual changes to the keys used in the encryption hierarchy? We are using 2014 Enterprise edition and have recently enabled TDE across our databases and ...
0
votes
0answers
38 views

How to use tablespace

I am trying to implement Transperent Data Encryption. I am done with setting up the wallet and creating the tablespace. My doubt is how to specify tablespace so that every object(tables/functions/...
1
vote
1answer
128 views

SQL Server TDE Vs SQL Server Database Backups

Can anyone please help me understand below case: Kindly advise on below case: SQL Server is on 2014 SP2 GDR version I read Compression and TDE does not go hand in hand . I have 2 PRD Environments:...
1
vote
0answers
111 views

Is there a way to open an encrypted Oracle Database wallet through weblogic JDBC drivers?

I encrypted a column in an Oracle 12c database using the TDE method, The said column was being used in my application, The column becomes unavailable due to the Database wallet being closed. To open ...