Solved

Encryption on database tables MSSQL 2008

Posted on 2014-12-02
3
63 Views
Last Modified: 2015-03-24
Hello experts,

DO you have any tutorial, suggestions  on how to encrypt tables on database MSSQL 2008?
Once they are encrypted, would it affect my ASP.net applications I have when i call such tables?


thank you
0
Comment
Question by:shpresa
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 33

Expert Comment

by:Dave Howe
ID: 40476785
Depends on how you want to encrypt.
If you are interested in at-rest encryption, then you can simply encrypt the storage media (bitlocker, efs, whatever)

If you want to do explicit encryption, then you need to alter apps to use the 2008 crypto primitives (such as ENCRYPTBYKEY - that means coding changes.

if you want to do this without altering the code, then you need to follow this guide to Transparent Data Encryption - might take a couple of looks before you get the idea, so feel free to post follow up questions in this thread for clarification :)
0
 

Author Comment

by:shpresa
ID: 40476883
Hi thank you for the info.

I was interested for encryption at rest and in transit, when data is moving.
Without altering the code would be great. Is the transparent data encryption used when data is in transit?
0
 
LVL 33

Accepted Solution

by:
Dave Howe earned 500 total points
ID: 40477267
TDE is similar to the on the fly disk encryption, but is done by the database engine rather than the operating system - think of it as on-the-fly table encryption.  

For that reason, it is effectively encrypted only "at rest" - the data from app to engine will be plaintext, so should be further protected by TLS at the session level between app and engine (the technology is the same as is used for https)

I did a little googling, and found This Article which may explain your options better.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The article shows the basic steps of integrating an HTML theme template into an ASP.NET MVC project
A Stored Procedure in Microsoft SQL Server is a powerful feature that it can be used to execute the Data Manipulation Language (DML) or Data Definition Language (DDL). Depending on business requirements, a single Stored Procedure can return differe…
Via a live example combined with referencing Books Online, show some of the information that can be extracted from the Catalog Views in SQL Server.
Via a live example, show how to setup several different housekeeping processes for a SQL Server.

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question