TDE Setup

Question

TDE Setup

Steve Jones - SSC Editor

SSC Guru

Points: 736478
More actions
July 25, 2013 at 10:32 pm

#73381

Comments posted to this topic are about the item TDE Setup
July 26, 2013 at 7:41 am

This was removed by the editor as SPAM

Viewing 15 posts - 1 through 15 (of 17 total)

You must be logged in to reply to this topic. Login to reply

SQLRNNR SSC Guru Points: 281334 More actions · Answer 1

Nice and easy - thanks Steve.

Jason...AKA CirqueDeSQLeil
_______________________________________________
I have given a name to my pain...MCM SQL Server, MVP
SQL RNNR
Posting Performance Based Questions - Gail Shaw[/url]
Learn Extended Events

Lokesh Vij SSChampion Points: 10836 More actions · Answer 2

SQLRNNR (7/25/2013)
Nice and easy - thanks Steve.

+1 🙂

~ Lokesh Vij

Guidelines for quicker answers on T-SQL question[/url]
Guidelines for answers on Performance questions

Link to my Blog Post --> www.SQLPathy.com[/url]

Follow me @Twitter

Vinay Kumar SSCertifiable Points: 6099 More actions · Answer 3

Good one !!!

Thanks
Vinay Kumar
-----------------------------------------------------------------
Keep Learning - Keep Growing !!!

Koen Verbeeck SSC Guru Points: 259115 More actions · Answer 4

TDE isn't my strong suit. Ah well, it's almost weekend 🙂

Need an answer? No, you need a question
My blog at https://sqlkover.com.
MCSE Business Intelligence - Microsoft Data Platform MVP

Anipaul SSC-Insane Points: 24681 More actions · Answer 5

Anipaul

SSC-Insane

Points: 24681

July 26, 2013 at 2:59 am

#1636078

Nice one.

PHYData DBA SSCertifiable Points: 7541 More actions · Answer 6

Nice question that should have been easy.

Should have read it slower I guess.

You create and store the Certificates in master.

You have to be connected to the CRM to USE the certificate to protect the DEK.

Hugo Kornelis SSC Guru Points: 64790 More actions · Answer 7

I got it right, because I know that you have to create a certificate in master to protect the master key - but the question is a bit misleading.

The question says: "You have created a master key already in the master database and in the CRM database".

First, you do not create a master key in the CRM database. The master key is in the master database only. The key in the CRM database is called a "database encryption key" (DEK).

Second, I don't even think it's possible to create the DEK in the CRM database without FIRST creating the certificate. Since you need this certificate when you create the DEK.

Hugo Kornelis, SQL Server/Data Platform MVP (2006-2016)
Visit my SQL Server blog: https://sqlserverfast.com/blog/
SQL Server Execution Plan Reference: https://sqlserverfast.com/epr/

PHYData DBA SSCertifiable Points: 7541 More actions · Answer 8

Hugo Kornelis (7/26/2013)
I got it right, because I know that you have to create a certificate in master to protect the master key - but the question is a bit misleading.
The question says: "You have created a master key already in the master database and in the CRM database".
First, you do not create a master key in the CRM database. The master key is in the master database only. The key in the CRM database is called a "database encryption key" (DEK).
Second, I don't even think it's possible to create the DEK in the CRM database without FIRST creating the certificate. Since you need this certificate when you create the DEK.

Glad to know it was not just me... Still a good question Steve.

udayroy15 Ten Centuries Points: 1076 More actions · Answer 9

udayroy15

Ten Centuries

Points: 1076

July 26, 2013 at 8:33 am

#1636186

Good question.......

Revenant SSC-Forever Points: 42467 More actions · Answer 10

Got it wrong but learned something...

Thanks, Steve!

Steve Jones - SSC Editor SSC Guru Points: 736478 More actions · Answer 11

Hugo Kornelis (7/26/2013)
I got it right, because I know that you have to create a certificate in master to protect the master key - but the question is a bit misleading.
The question says: "You have created a master key already in the master database and in the CRM database".
First, you do not create a master key in the CRM database. The master key is in the master database only. The key in the CRM database is called a "database encryption key" (DEK).
Second, I don't even think it's possible to create the DEK in the CRM database without FIRST creating the certificate. Since you need this certificate when you create the DEK.

The master key in the CRM database was designed to be misleading to see if you understand. You can create a master key in any database. However for TDE, only the one in the "master" database matters.

The DEK is in the TDE enabled database, and is protected by a cert in master, which you must create first.

Miles Neale SSChampion Points: 13147 More actions · Answer 12

Steve Jones - SSC Editor (7/26/2013)

The master key in the CRM database was designed to be misleading to see if you understand. You can create a master key in any database. However for TDE, only the one in the "master" database matters.
The DEK is in the TDE enabled database, and is protected by a cert in master, which you must create first.

Almost got me. Thank you for this further explanation I had to scratch my head and rethink this before I answered. Thanks for forcing us to be alert, even on a Friday.

🙂

Not all gray hairs are Dinosaurs!

TomThomson SSC Guru Points: 104773 More actions · Answer 13

Nice question.

We are getting quite a series of questions on TDE. It's good to have many questions on a topic and fairly close together, as it teaches much more effectively that questions separated by months.

Tom