We changed our privacy policy. Read more.

Questions tagged [transparent-data-encryption]

Transparent Data Encryption, a feature used to provide protection for data at rest.

Filter by
Sorted by
Tagged with
0
votes
0answers
178 views

Enabling TDE on PRODUCTION Servers - Guidance , Suggestions and Testing TDE ways

First of all just want to say , I am completely new to Transparent Data Encryption. Can I get some guidance on things to keep in mind while I am enabling TDE on Critical PRODUCTION Servers. I have ...
2
votes
1answer
416 views

Script to automate enabling TDE on any unencypted user databases

I'm looking for a way to automate the encryption of user databases. Ideally this would be a job that can be scheduled to run every night. The job would: find any user database that is not encrypted, ...
0
votes
1answer
179 views

Enabling TDE on SQL Server AOAG 2014 Databases - Guidance

I am completely new to Transparent Data encryption and please help me on below questions related to enabling the TDE on existing PRODUCTION Databases. Primary Question: What are the things which I ...
5
votes
2answers
1k views

Best practice around non-production databases refreshes and TDE

Say we have a production system with several databases encrypted using TDE and a self-generated certificate. We regularly need to take this database and refresh our non-production systems. This ...
0
votes
2answers
313 views

TDE using EKM device

We use an external HSM device to create and store keys and use it for TDE. Our auditors are asking questions about where the keys are store. So obviously the key is stored in the external HSM device. ...
0
votes
1answer
4k views

How can I enable Transparent Data encryption (TDE) on MySQL 5.6

I am looking to perform real-time I/O encryption and decryption on MySQL 5.6 Database. I have few questions to understand Transparent Date Encryption (TDE): Note: I am using AlibabaCloud Can I ...
0
votes
1answer
70 views

Restoring MS SQL TDE database question

I'm new to SQL Server TDE and have a question. I have two VM's (VM1 = Source and VM2 = Target). On the source machine, I executed all the required steps to enable my Test database as well as backing ...
0
votes
1answer
749 views

Disabling TDE on AlwaysOn database

Which are the correct steps to disable (not removing) TDE on a AlwaysOn database in an availability group? I found steps for removing TDE but that involves removing the availability group and ...
2
votes
0answers
66 views

Mirrored TDE DB Performance

Performing a large index reorg on a mirrored SQL Server 2014 TDE database creates a large redo log on the mirror and the mirroring monitor displays an infinite restore time. The exact same process ...
1
vote
2answers
4k views

Change expiry date of TDE certificate of User Database without changing Thumbprint

I have been searching through internet on how to change expiry date of TDE certification of a user database at SQL Server 2014 SP2 and got so many articles and most of them are suggesting to drop and ...
-3
votes
1answer
1k views

Disadvantages of TDE [closed]

Is there any effect at the application end, if you configure TDE for Production databases, which are in both replication and Always On Availability Groups in SQL Server 2014 Enterprise Edition? This ...
0
votes
1answer
310 views

SQL Server 2008 Database encryption

In my company there is MS SQL SERVER 2008 standard edition installed. My problem is we want to encrypt whole database but in standard edition there is encryption like transparent-data-encryption(TDE) ...
2
votes
2answers
236 views

Trying to read a log file encrypted by TDE

I have a full chain of full backups and log backups. I am looking to investigate exactly what transaction was done by a certain user in a given period of time. The database (thus all backups) are ...
3
votes
1answer
582 views

TDE enabled database backup taking too long

We have recently implemented TDE and backup compression is also enabled. Before TDE backup used to take about 20min but now it takes about one hour. I have set @MaxTransferSize to 3MB, 2MB, 1MB and ...
0
votes
1answer
51 views

Alternatives to User Defined Performance Counters for CPU Monitoring - SQL 2014

I want to monitor CPU usage before implementing TDE on several production SQL Servers. My plan was to use user defined performance counters, over a period of a couple of days, counters as defined ...
1
vote
1answer
678 views

Restore SQL Server DB encrypted by EKM - where's the asymmetric key?

MS is clear about restoring TDE backups: Certificate has to be restored on destination OR, in case of EKM, the asymmetric key " When moving a TDE protected database, you must also move the ...
0
votes
1answer
903 views

Is it (always) necessary to backup a certificate with private key?

I'm starting a project to encrypt database files. I've created a master key and a certificate the following way: USE master; GO CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'Master_K3y'; GO CREATE ...
1
vote
1answer
2k views

Is there any approach for encrypting mysql column by key?

I have a scenario for encrypting user information in mysql db. Is there any approach to encrypting column by key. This key information will be there in application configuration file. This key we won'...
3
votes
1answer
3k views

Microsoft SQL Server 2016 Service Pack 1 (SP1) support for TDE (transparent data encryption)

Does Microsoft SQL Server 2016 Service Pack 1 add support for TDE (Transparent Data Encryption) to Standard Edition as well? As per What's new in Database Engine - SQL Server 2016 and A Big Deal : ...
0
votes
1answer
184 views

Using TDE and SQL Server 2016 AlwaysOn Availability Groups

We currently use SQL Server 2012 AG are in process of migrating to SQL 2016. We use EMC SAN for storage and it provides the data encryption at rest on hardware level. Some folks are thinking about ...
1
vote
0answers
31 views

Do any databases other than SAP ASE support key custodians?

SAP Sybase ASE supports the notion of a key custodian. This allows for a setup where the trust can be split between two roles: the database administrator and a key custodian. The database ...
1
vote
1answer
444 views

Backup errors after TDE certificate expired and new cert was created with AlwaysOn

I have 2 databases in AlwaysOn with TDE enabled. My TDE cert expired and i created a new one but Ola's Backup script is still failing: EXECUTE [dbo].[DatabaseBackup] @Databases = 'DB1, DB2', @...
13
votes
1answer
827 views

Backup Compression Causing Corruption In SQL 2017 TDE Database

On SQL Server 2017 (CU3), whenever I enable backup compression on one of my TDE databases, the backup process always corrupts a specific page in the database. If I run the backup without compression, ...
1
vote
1answer
665 views

SQL 2016 Always encrypted for all data?

I have been tasked with encrypting all data on an SQL database (SQL 2016 standard). However this doesnt support TDE (Transparent Data Encryption) when I try I get the below error. Transparent Data ...
2
votes
1answer
389 views

Cloning a PDB from one CDB into another CDB with TDE enabled at source and target

What are the possible ways to Clone a PDB from one CDB into another CDB (in a different host) with TDE enabled at both source and target. At present i am able to think of the following two a) Data ...
4
votes
1answer
2k views

TDE Encryption on database tripled size of backup files

After enabling TDE Encryption my database backup file .bak is 3x larger than before. Is there a way to improve this? Is this due to compression not being as efficient on an encrypted file?
9
votes
1answer
4k views

BACKUP MASTER KEY failing with cannot find symmetric master key because it does not exist

I'm trying to backup the master key for a TDE database, but SQL Server says there isn't one. It's a bit weird, but I'm sure I'm just doing something wrong. I'm sysadmin on the server, so I should be ...
3
votes
1answer
3k views

TDE cannot encrypt database

In order to encrypt a SQL db, I run the following commands: CREATE CERTIFICATE <certname> ENCRYPTION BY PASSWORD = '<UseStrongPasswordHere>' WITH SUBJECT = 'certificate subject', ...
5
votes
1answer
200 views

Swapping TDE Cert Slow, any way to improve performance?

Fair warning, I am very new to encryption with DBs. Right now we use the following statement to swap certificates when in the process backing/restoring DBs between servers: ALTER DATABASE ENCRYPTION ...
1
vote
0answers
579 views

How to shrink transaction log for a database that was previously in AlwaysOn Availability Group?

I need to move databases having TDE enabled to another instance and re-enable the TDE with a different certificate. Generally, this would not be a problem but I seem to have problems if the databases ...
2
votes
1answer
190 views

TDE Performance and Cost Threshold for Parallelism

Is there any documentation, test data, or other evidence to suggest that the Cost Threshold for Parallelism (CTP) setting might impact performance when TDE is enabled on a database? Without going ...
3
votes
3answers
1k views

What do I need to restore an encrypted MSSQL database?

I am trying to get my head around MSSQL TDE encryption. I have followed these steps to encrypt a database: 1) Create a master key on the master database: USE master GO CREATE MASTER KEY ENCRYPTION ...
9
votes
2answers
426 views

Is network traffic encrypted when writing remote backups using SQL Server TDE?

They do say there is no such thing as a “stupid question”, so here goes: I understand that SQL Server Transparent Data Encryption (TDE) encrypts data at rest, so that your database files (.mdf) and ...
1
vote
1answer
62 views

encrypting live data in SQL Azure

We are using webjob in azure which imports data every 2 hours into the tables I've created in the cloud. As I read it from here, I can encrypt the db very easily using azure TDE feature. But I am ...
2
votes
1answer
729 views

TDE Change Encryption Key - Is it safe?

We use SQL Server 2012 Enterprise Edition and Transparent Data Encryption (TDE). Microsoft have a command to let you change the encryption on the database "ALTER DATABASE ENCRYPTION KEY". The docs ...
1
vote
1answer
938 views

How can I prevent our IT admins with sysadmin to read data stored inside an encrypted database? [closed]

I built a web application that stores sensitive data into a SQL Enterprise 2014 database with TDE encryption. My key is safe; I know if someone steals the database file from disk the data is protected....
2
votes
3answers
314 views

Deploying transparent data encryption

I have an installation of SQL 2016 Enterprise and my boss want to deploy TDE. I googled online and all the instruction said about "you can use a self sign certificate for test/dev purpose". Most ...
4
votes
1answer
504 views

Backup Failure on SQL TDE Database with Maxtransfersize Specified for Compression

Recently, my company has upgraded to 2016 and enabled TDE on all of our databases. Additionally, we have the production databases replicated on high availability servers. Our backups are taken from ...
10
votes
3answers
1k views

Unable to restore TDE enabled database when MAXTRANSFERSIZE and CHECKSUM is used

Update: @AmitBanerjee - Senior Program Manager for the Microsoft SQL Server Product Group confirmed that MS will look into the issue as it is a defect. Has anyone encountered issue restoring backups ...
5
votes
2answers
614 views

Removing TDE from server

I have removed Transparent Data Encryption (TDE) from my server, dropped the key and switched the databases to Simple, shrunk the log and then back to Full. The LOG backups are now smaller as well as ...
-1
votes
2answers
408 views

oracle 10g - encrypting existing column - Transparent Data Encryption

It's possible encrypting existing column without lost and rewrite data? I've few milion of record and it's very important not lost data.
2
votes
2answers
3k views

Backup and restore of TDE Databases to different server

There seems to be a lot of information on backing up and restoring TDE databases, but it's generally all the same information, and there seems to be some contradiction about certain points. I have ...
1
vote
1answer
1k views

Using SQL Server TDE - Encryption 0 percent

I'm using TDE for SQL Server. Querying certificate: select database_name = d.name, dek.encryptor_type, cert_name = c.name from sys.dm_database_encryption_keys dek left join sys.certificates c on dek....
3
votes
2answers
3k views

Replacing SQL Server TDE soon expiring certificate

What is the best way to replace a soon expiring certificate? Downtime should be avoided. Databases size is 100GB.
1
vote
2answers
752 views

How is the Database Encryption Key for SQL Server TDE linked to the certificate?

The MSDN article on SQL Server TDE states "Create a database encryption key and protect it by the certificate". What does protect mean? The database encryption key is not created from the certificate?
0
votes
1answer
596 views

SQL Server TDE with PKI - converting P12/PKX to PVK/DER format

To use TDE for SQL Server we are obliged to use a PKI certificate. The certificate has the format .p12(.pkx). Microsoft offeres a certficate converter for SQL Server. Using it - it creates three ...
2
votes
1answer
590 views

Encrypt / Decrypt String

I've been approached with a requirement. One of our devs wants to be able to store information in the database, but once there it needs to be encrypted, so that if anyone ever gets a copy of the ...
0
votes
1answer
517 views

Installing SQL Server TDE on a Windows Cluster

i'm going to be upgrading two Instances to Enterprise and thenI'm going to be installing TDE on two sides of a Windows Cluster. All of the databases are on one storage device and whichever Instance is ...
4
votes
3answers
6k views

Open source & cheap 'data at rest' encryption solutions

So I am exploring some options about database encryption. The best options are commercial (TDE). I am looking for an open-source implementation. Recent releases of MySQL and MariaDB have data-at-rest ...
1
vote
0answers
498 views

MySQL Supported versions of MySQL Enterprise TDE

We are bidding for a project involving developing a portal using Liferay, which requires that we use MySQL version 5.5 which is the current compliant version of MySQL with Liferay. We need also use ...