Questions tagged [transparent-data-encryption]

Transparent Data Encryption, a feature used to provide protection for data at rest.

Filter by
Sorted by
Tagged with
0
votes
0answers
27 views

SQL Server 2019 and Transparent Data Encryption - Intermittent (silent) Error Log Messages

I recently migrated a SQL Server 2017 TDE database to SQL Server 2019 CU4. I was browsing the Error Log and noticed intermittent messages about An error occurred while processing log encryption. The ...
0
votes
1answer
33 views

Cloning a SQL Server Virtual Machine with TDE

When a virtual machine with a SQL Server database that uses TDE is copied or cloned, will the database be readable on the new instance?
0
votes
0answers
17 views

SQL 2016 - TDE Restore Failing Even After Certificate Restore

I'm trying to ship some TDE enabled database backups from one server to another and I'm having a problem. Specifically, I'm getting the following error: RESTORE FILELISTONLY FROM DISK = N'<path>...
1
vote
1answer
49 views

What's the limit of TDE certificates allowed in master database [SQL Server]

Let's say I have a SQL instance with 10k databases that I want to enable TDE using different certificates for each database. Is there any kind of limit to creating certificates on master database? ...
0
votes
1answer
105 views

Oracle 12c. Is it possible to export a TDE encrypted table using expdp / impdp to a database without TDE / wallet enabled?

I have an Oracle 12c database where I have encrypted certain columns of several tables, I want to import or load these tables into another database which does not have TDE enabled, as would be ...
0
votes
1answer
370 views

Oracle 19c cannot create master key

I cannot create master key in oracle 19c... I set parameter in sqlnet.ora like as: WALLET_LOCATION= (SOURCE= (METHOD=file) (METHOD_DATA= (DIRECTORY=/opt/oracle/product/19c/db_home/...
1
vote
0answers
22 views

In Place Rebuild a TDE Encrypted SQL Server Instance

I have a TDE Encrypted SQL Server machine (with a masterkey, Certs, etc). I need to rebuild this SQL Server onto new hardware, BUT keep the original SQL Server Name. The new box will be named exactly ...
1
vote
0answers
78 views

SQL Server 2019 and TDE

We are about to move away from SQL 2008R2 to a much newer version. We upgraded to the Enterprise Edition of 2008R2 just for TDE, but I was just browsing here: https://docs.microsoft.com/en-us/sql/sql-...
8
votes
1answer
314 views

Internals of backup compression with TDE (SQL Server)

Does anyone have any (inside?) knowledge of how backup compression works with TDE on SQL Server (version 2016+). In general I would expect compression of encrypted data to have minimal benefit, ...
0
votes
0answers
16 views

Can we change asymmetric key attached to a SQL server login

I have created a login using the below command: Create Login test From Asymmetric Key asymkey1; Is there any way to alter the login and attach a different Asymmetric Key asymkey2?
1
vote
1answer
238 views

SQL Connector for Azure Key Vault - Cannot use more than one key vault

I am using SQL Server 2016 Enterprise Edition with SQL Connector for Azure Key Vault. I am trying to attach more than one Key Vault to my SQL instance but it is not working. I went through these ...
4
votes
2answers
379 views

SQL TDE and Certificate Handling Recommendations

I've seen the information on this post: But I don't think it answers this particular question/concern: I have multiple SQL servers with multiple databases. We want to use TDE on a few of them. ...
6
votes
2answers
597 views

Turn TDE off when restoring SQL databases

We are just getting started with TDE. Eventually it will be in our Prod SQL Server environment and two major non-prod environments, but currently it is only in one non-prod system. My question is ...
2
votes
0answers
115 views

Where can I find the reason why TDE encryption Scan aborted?

When encrypting large database > 10TB . I had to issue --alter database set encryption on several times , but the encryption starts and fails with the same message in the error log. where can i find ...
1
vote
1answer
46 views

Auditing of modification of change to encryption keys

Is it possible to audit/log any attempts or actual changes to the keys used in the encryption hierarchy? We are using 2014 Enterprise edition and have recently enabled TDE across our databases and ...
0
votes
0answers
33 views

How to use tablespace

I am trying to implement Transperent Data Encryption. I am done with setting up the wallet and creating the tablespace. My doubt is how to specify tablespace so that every object(tables/functions/...
1
vote
1answer
104 views

SQL Server TDE Vs SQL Server Database Backups

Can anyone please help me understand below case: Kindly advise on below case: SQL Server is on 2014 SP2 GDR version I read Compression and TDE does not go hand in hand . I have 2 PRD Environments:...
1
vote
0answers
98 views

Is there a way to open an encrypted Oracle Database wallet through weblogic JDBC drivers?

I encrypted a column in an Oracle 12c database using the TDE method, The said column was being used in my application, The column becomes unavailable due to the Database wallet being closed. To open ...
2
votes
0answers
42 views

TEMP Database is not showing Encrypted in TDE in SQL Server 2008R2

As per my knowledge, when we encrypt any user database in SQL Server through TDE, the TEMP database automatically gets encrypted. I have done TDE in SQL Server 2016, and when I check through SELECT ...
0
votes
1answer
155 views

SQL Connector for Azure Key Vault - multiple key vaults and keys per instance

In SQL Server 2016 Enterprise Edition, is it possible to link a single instance to more than one Azure key vault / EKM provider? If so, how would I add an additional provider? Any security ...
3
votes
1answer
4k views

How to change SQL Server master key password?

I created a master key, then a certificate and encrypted my database. CREATE MASTER KEY ENCRYPTION BY PASSWORD='A Very Strong Password'; GO CREATE CERTIFICATE foo WITH SUBJECT='Database Encryption ...
1
vote
1answer
722 views

File permissions for database backups and certificate backups

I have backed up a database and backed up the database master key to the very same folder. Everyone has full access to this folder, however, only the database backup inherits the permissions of the ...
7
votes
1answer
564 views

TDE Master Key Rotation

Does changing the TDE Master Key (DB Master Key and/or the DB encryption key) always require decryption and re-encryption? If not, at what version did SQL Server begin to allow you to change the ...
5
votes
2answers
430 views

Database Encryption scan for database <name> was aborted. Reissue ALTER DB to resume the scan

I disabled TDE on a database and once completed I dropped the DB certificate for it. Later I performed a manual failover to node2 and ran steps to enable TDE once again. However encryption state is ...
0
votes
0answers
188 views

TDE Enabled DB Always Going Into “Recovery Pending” on Secondary Node [duplicate]

I have a Windows Failover Cluster set up with SQL 2016 Enterprise SP2. TDE was implemented on a DB, on node1 the DB is able to start without issues. However, when a failover occurs, on node2 the DB ...
1
vote
1answer
61 views

SQL Server TDE - Database backups and post restore behaviour

Below is my SQL Server details: SQL Server 2014 Enterprise SP2 GDR with Availability Group configured. List item NOTE: The Databases are FileStream Enabled. Below are the series of actions I did ...
0
votes
1answer
47 views

using oracle tde

I am new to using oracle database. I want to encrypt data stored in oracle. I am using oracle 18c for this and using TDE(Transparent Data Encryption) feature for it. However, when I run select query ...
1
vote
1answer
200 views

Clarifications on Transparent Data Encryption

This is the first time we are applying TDE on production databases that are critical and I have the questions below. While TDE is in progress: Can we still access the application that is working on ...
0
votes
0answers
963 views

Change Encryption Wallet type from PASSWORD to AUTOLOGIN

I am currently working on an Oracle 18.3 DB and I have a script which allows me to create an encrypted seed PDB. As part of this script, we encrypt the system tablespaces (like SYSTEM, SYSAUX, and ...
1
vote
2answers
156 views

Will TDE encryption protect my SQL database from hacker in this scenario

I'm a bit understand that TDE encryption protect the database from being stolen and read by a hacker. However, I don't understand if it can help me in this scenario: If a hacker got into my server and ...
1
vote
2answers
423 views

How do you use pvkconverter.exe - not working for me?

I tried to following this link to convert a .pfx file to the .cer and .pvk file pair. When I run this command: "C:\Program Files (x86)\Microsoft\PVKConverter\PVKConverter.exe" -i TDE_Cert.pfx -o ...
0
votes
1answer
58 views

Data Security in MS SQL Server

How do I store the sensitive information on SQL server?. We have policy guidelines, DBA and Development engineers are not allowed to view the data as plain text. I am aware of the encryption ...
0
votes
1answer
424 views

Generate the statistics of a table after truncating it and then repopulate it?

Is it necessary to generate the statistics of a table after truncating it and then repopulate it? I have a table with several million rows in Oracle.Every week new data is recharged, truncating the ...
0
votes
1answer
136 views

Restore fails on unencrypted database

I tried to restore an unencrypted database to a different server and it failed with the error: "Cannot find certificate with thumbprint". This suggests the database is encrypted but it is not. ...
3
votes
2answers
89 views

I only have backup of a TDE encrypted SQL Server database--can it be restored it to another server?

My situation is little weird--I have no access to the source database server, but I do have the database backups of a database that is encrypted with TDE. When I restore it to another server, I am ...
0
votes
0answers
149 views

Enabling TDE on PRODUCTION Servers - Guidance , Suggestions and Testing TDE ways

First of all just want to say , I am completely new to Transparent Data Encryption. Can I get some guidance on things to keep in mind while I am enabling TDE on Critical PRODUCTION Servers. I have ...
1
vote
0answers
264 views

Script to automate enabling TDE on any unencypted user databases

I'm looking for a way to automate the encryption of user databases. Ideally this would be a job that can be scheduled to run every night. The job would: find any user database that is not encrypted, ...
0
votes
1answer
164 views

Enabling TDE on SQL Server AOAG 2014 Databases - Guidance

I am completely new to Transparent Data encryption and please help me on below questions related to enabling the TDE on existing PRODUCTION Databases. Primary Question: What are the things which I ...
5
votes
2answers
741 views

Best practice around non-production databases refreshes and TDE

Say we have a production system with several databases encrypted using TDE and a self-generated certificate. We regularly need to take this database and refresh our non-production systems. This ...
0
votes
2answers
233 views

TDE using EKM device

We use an external HSM device to create and store keys and use it for TDE. Our auditors are asking questions about where the keys are store. So obviously the key is stored in the external HSM device. ...
0
votes
1answer
3k views

How can I enable Transparent Data encryption (TDE) on MySQL 5.6

I am looking to perform real-time I/O encryption and decryption on MySQL 5.6 Database. I have few questions to understand Transparent Date Encryption (TDE): Note: I am using AlibabaCloud Can I ...
0
votes
1answer
68 views

Restoring MS SQL TDE database question

I'm new to SQL Server TDE and have a question. I have two VM's (VM1 = Source and VM2 = Target). On the source machine, I executed all the required steps to enable my Test database as well as backing ...
0
votes
1answer
554 views

Disabling TDE on AlwaysOn database

Which are the correct steps to disable (not removing) TDE on a AlwaysOn database in an availability group? I found steps for removing TDE but that involves removing the availability group and ...
2
votes
0answers
61 views

Mirrored TDE DB Performance

Performing a large index reorg on a mirrored SQL Server 2014 TDE database creates a large redo log on the mirror and the mirroring monitor displays an infinite restore time. The exact same process ...
1
vote
2answers
3k views

Change expiry date of TDE certificate of User Database without changing Thumbprint

I have been searching through internet on how to change expiry date of TDE certification of a user database at SQL Server 2014 SP2 and got so many articles and most of them are suggesting to drop and ...
-3
votes
1answer
871 views

Disadvantages of TDE [closed]

Is there any effect at the application end, if you configure TDE for Production databases, which are in both replication and Always On Availability Groups in SQL Server 2014 Enterprise Edition? This ...
0
votes
1answer
301 views

SQL Server 2008 Database encryption

In my company there is MS SQL SERVER 2008 standard edition installed. My problem is we want to encrypt whole database but in standard edition there is encryption like transparent-data-encryption(TDE) ...
2
votes
2answers
166 views

Trying to read a log file encrypted by TDE

I have a full chain of full backups and log backups. I am looking to investigate exactly what transaction was done by a certain user in a given period of time. The database (thus all backups) are ...
3
votes
1answer
477 views

TDE enabled database backup taking too long

We have recently implemented TDE and backup compression is also enabled. Before TDE backup used to take about 20min but now it takes about one hour. I have set @MaxTransferSize to 3MB, 2MB, 1MB and ...
0
votes
1answer
34 views

Alternatives to User Defined Performance Counters for CPU Monitoring - SQL 2014

I want to monitor CPU usage before implementing TDE on several production SQL Servers. My plan was to use user defined performance counters, over a period of a couple of days, counters as defined ...