Microsoft® SQL Server 2008 R2 Unleashed
by Ray Rankins, Paul Bertucci, Chris Gallelli, Alex T. Silverstein
Limitations of TDE
Although TDE offers many benefits over column-level encryption, it has some of its own limitations, which are important to consider. They include
• TDE is not granular like column-level encryption. The entire database is encrypted, but only on disk. Sensitive data such as Social Security numbers or credit card numbers can be seen by anyone who has permission to access those columns. TDE also does not prevent DBAs from viewing any data in the database.
• TDE does not protect communications between client applications and SQL Server. Network encryption methods should be used to protect sensitive data flowing over the network.
• FILESTREAM data is not encrypted.
• When any one database on a SQL Server instance has TDE enabled, ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access