In terms of encryption, Key Rotation is the process of replacing your encryption keys on a periodic basis. This is considered good practice and is required by many security...
2023-02-20 (first published: 2023-02-06)
264 reads
If you don’t have the backups of the certificate and private key from the old server, as well as the password used to encrypt the private key backup then...
2023-02-01
191 reads
In this post we look at a method using Extended Events (XE) to identify what parent objects are calling a given SQL function and how often. The background is...
2023-02-01 (first published: 2023-01-23)
459 reads
When encrypting a database with Transparent Data Encryption (TDE), a vital consideration is to make sure we are prepared for the scenario where something goes wrong. For instance, if...
2023-01-30
15 reads
Monitoring for Problems The encryption of your existing data occurs as a background process referred to as the encryption scan, but it will consume resources while it runs, so...
2023-01-27
184 reads
I had a request regarding how to identify unused indexes across all databases on a SQL Server instance (rather than just the current one). I’ve written this script before...
2023-01-16 (first published: 2023-01-05)
884 reads
As we’ve seen in previous posts, the process of turning TDE on for an empty database with no data is instantaneous. Most of the time though you’ll be applying...
2023-01-13
32 reads
When we consider how secure a form of encryption is there are two things we want to consider. Let’s discuss each of these in turn. What are We Protected...
2023-01-13 (first published: 2023-01-03)
380 reads
Brent Ozar shared in his weekly links this week a GDPR penalty tracker which makes for thought-provoking reading. Regular readers of this blog will know I have a keen...
2023-01-10
15 reads
In this quick post we’re going to look at an additional step you should take to secure your TDE databases. This is a step you won’t find in any...
2023-01-09
19 reads
By Steve Jones
It’s been an amazing week here, as well as a long week. I’m tired,...
By Steve Jones
skidding – v. intr. the practice of making offhand comments that sound sarcastic but...
By Brian Kelley
Let’s start with the keynote. The biggest take away was how having to support...
Comments posted to this topic are about the item Step by step guide to...
Comments posted to this topic are about the item Backing up the Database Encryption...
Comments posted to this topic are about the item Technology Fears
In my SQL Server 2022 database, I run this:
USE Sales; GO CREATE DATABASE ENCRYPTION KEY WITH ALGORITHM = AES_256 ENCRYPTION BY SERVER CERTIFICATE MyServerCert; GOThis works, but I want to prepare for the future and potential issues. How do I back up my DEK? See possible answers