Recently a customer asked me for help with setting up a test of an Azure SQL Database in the single database tier with Geo-Replication to work with Transparent Data Encryption (TDE) with a customer-managed key, also known as Bring Your Own Key (BYOK). It is very simple to do it when you use service-managed keys, […]
2020-07-21
2,555 reads
In this third level of the Stairway, we examine how to store your encryption certificate in the Azure Key Vault.
2024-06-26 (first published: 2020-06-24)
8,874 reads
In the second level of the stairway to TDE, we examine how you can restore your databases on another instance after moving the encryption certificate.
2024-06-26 (first published: 2020-05-20)
53,833 reads
The first level of the Stairway to TDE will explain how the feature works and how to set this up on one of your instances and databases.
2024-06-26 (first published: 2020-04-29)
11,549 reads
In this article Filip Holub looks at how to configure and enable transparent data encryption for a SQL Server database using PowerShell.
2020-02-25
Security is often something people think about only after they have had a problem. Given that the average cost of a data breach is $3.92 million (SecurityIntelligence 2019) and ransomware attacks have increased 97% over the past 2 years (PhishMe 2019), the "if it's not broke, don't fix it" approach can clearly be catastrophic. Here […]
2019-10-07
9,366 reads
Learn how you can secure your TDE environment by separating your key from the server using Extensible Key Management.
2019-09-30
9,376 reads
Transparent Data Encryption (TDE) has been around for a long time. It first appeared in SQL Server 2008, and after a rocky start with some bugs, it has become a regularly used feature for many organizations. While not perfect, it does provide some protection and auditors like to see physical protection features being used. It's […]
2019-08-29
15,524 reads
Once you enable your database to be encrypted with Transparent Data Encryption (TDE), the physical database files, and the database backups are encrypted. If your database and database backup are encrypted, then how can you send the encrypted backup to a person outside your organization?
2018-03-27
2,947 reads
When using Transparent Data Encryption, you might wonder “What is the state of my transparent data encrypted database?” Read on to learn the many different states that a transparent data encrypted database might go through.
2018-03-19
2,510 reads
Quite the title, so let me set the stage first. You have an Azure...
By HeyMo0sh
In the realm of software development and content creation, the deployment pipeline serves as...
Comments posted to this topic are about the item A Quick Restore
Comments posted to this topic are about the item Guarding Against SQL Injection at...
I have a quick question on Ola Hallengren Index Optimize Maintenance . Do we...
While doing some testing of an application, I wanted to reset my environment after doing some testing with this code:
USE DNRTest BACKUP DATABASE DNRTest TO DISK = 'dnrtest.bak' GO /* Bunch of stuff tested here */RESTORE DATABASE DNRTest FROM DISK = 'dnrtest.bak' WITH REPLACEWhat happens if this runs, assuming the "bunch of stuff" isn't anything affecting the instance. See possible answers