SQL Server Transparent Data Encryption: Protecting Database Files at Rest

SQL Server Transparent Data Encryption: Protecting Database Files at Rest

by Eric Blinn
Released April 2020
Publisher(s): Apress
ISBN: 9781484259221

Watch it now on the O’Reilly learning platform with a 10-day free trial.

O’Reilly members get unlimited access to books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial

Video description

Protect yourself against data theft through unauthorized access to the physical database files and their copies that may be found in backup sets and transaction logs. Thwart unauthorized access to those files by making use of SQL Server’s Transparent Data Encryption (TDE) feature to provide at-rest encryption of an entire database such that only authorized instances of SQL Server can read the data, log, and backup files.

This video explains how the TDE feature works and shows how to implement at-rest encryption using best practices. It also covers independent backup encryption for an additional layer of protection. The video begins with an introduction to TDE and the pros and cons of its implementation. It talks about the use case for applying this type of encryption. The video then walks you through implementing TDE on a new database or existing database. Next, it will cover how to manage the movement of these encrypted databases. Finally, you'll cover independent backup encryption.

What You Will Learn
  • Recognize use cases for Transparent Data Encryption
  • Encrypt your entire database, including log and backup files
  • Preserve encryption keys and restore from encrypted backups
  • Manage encryption through dynamic management objects
  • Encrypt database backups independently of TDE
  • Move a TDE encrypted database, including log files
Who This Video Is For

Database administrators who need to encrypt a database at rest to meet IT audit requirements, or for reasons of data privacy and confidentiality. For system architects who want to understand their options for securing their organization’s confidential data. 

Table of contents

  1. Introduction 00:01:10
  2. Protecting Data at Rest 00:03:08
  3. Encryption Hierarchy 00:01:59
  4. Encrypting a Database 00:05:23
  5. Managing TDE 00:08:01
  6. Moving a TDE Enabled Database 00:03:43
  7. Encrypting a Database Backup 00:08:08
  8. Wrap Up 00:03:21

Product information

  • Title: SQL Server Transparent Data Encryption: Protecting Database Files at Rest
  • Author(s): Eric Blinn
  • Release date: April 2020
  • Publisher(s): Apress
  • ISBN: 9781484259221