Link to home
Start Free TrialLog in
Avatar of marrowyung
marrowyung

asked on

Encryption feature of SQL server 2008 R2 standard edition

Dear all,

We are considering to use the SQL server 2008 R2 standard edition as a 2 x nodes  SQL cluster on top of the Windows 2012 standard edition 2 nodes cluster.

I knew that Windows 2012 standard editin do not have this :

1)      Fine Grained Auditing
2)      Transparent database encryption
3)      Extensible Key Management

What kind of encryption SQL 2008 R2 standard edition provide? only SQL 2008 enterprise edition provide database level data encryption ? can the SQL server 2008 encryption compensate that ?

But did SQL server 2008 R2 standard provide audit option ?

DBA100.
Avatar of DBAduck - Ben Miller
DBAduck - Ben Miller
Flag of United States of America image

Encryption in SQL 2008 R2 is the same options as SQL 2012.  Standard Edition provides Cell level encryption with Certificates, or Symmetric Keys, but not TDE, this is an Enterprise feature.

Transparent Data Encryption is only offered in the Enterprise Edition of 2008 and above.  Standard Edition does not have this feature enabled.

SQL 2008 has an audit function but Enterprise is the fully featured audit like SQL 2012 IIRC.
Avatar of marrowyung
marrowyung

ASKER

you mean the SQL server 2008 R2 has encryption but only limited to:

1) Cell level encryption with Certificates
2) Symmetric Keys.

What is the URL shows that ?

"SQL 2008 has an audit function"

What is that audit? C2 audit and common criteria complinace ?
Right now I cannot get to the msdn site due to technical problems, but the URL for the features supported by the editions of 2008 and 2012 is here http://msdn.microsoft.com/en-us/library/cc645993(SQL.100).aspx

SQL 2008 R2 has auditing, but it has a lot of things you can audit.  C2 and Common Criteria Compliance are part of auditing, but you can do a lot more than just these.

http://msdn.microsoft.com/en-us/library/cc280386(v=sql.105).aspx
What I mean is as the Windows 2012 standard server do not have encryption, I want to see if SQL server can do this itself without relies on Windows 2012.

If the standard edition do not have encryption, then we can only relies on the ACL to protect the SQL server.

if this is still not enough, we need to enalbe the Audit feature to record everything done so that we are complianced.

DBA100.
ASKER CERTIFIED SOLUTION
Avatar of DBAduck - Ben Miller
DBAduck - Ben Miller
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thank dbaduck.