how do you encrypt an entire SQL 2005 database?

Using cell-level encryption will not work for my situation, so I was wondering if a Windows File encryption would work? (AKA EFS)

The database is about 30GB, and only 200K records total.

Does anyone have experince in this?

Thanks Ron

asked Nov 06 '09 at 03:49 AM in Default

Ron 1
21 ● 1 ● 1 ● 1

(comments are locked)

3 answers:

This is a great article from Brian Kelley - I strongly recommend you have a read through it.

answered Nov 06 '09 at 07:33 AM

Mark Allison
479 ● 1 ● 1 ● 4

(comments are locked)

Bear in mind that cell level encryption prevents prying eyes within the dB and if the physical files are moved, whereas file level encryption is more to prevent a dB being copied off the system and attached elsewhere, or using other tools to read the data.

Cell level encryption ensures that only appropraite users will be able to see what's in the dB, and only through the proper interface. Not even a curious SA could get a peek.

Make sure you understand the difference between the two and that it fits with your requirements.

And above all else when you use any kind of encryption - BACK UP ALL THE KEYS!

answered Nov 06 '09 at 12:21 PM

Blackhawk-17
10.5k ● 23 ● 29 ● 34

(comments are locked)

Upgrade to 2008 and use Transparent Data Encryption

http://technet.microsoft.com/en-us/library/bb934049.aspx

answered Nov 06 '09 at 08:23 AM

David 1
1.8k ● 1 ● 3

I know I am adding to this almost a year later, but I thought I should point out that TDE for SQL Server 2008 is only available in Enterprise Edition.

http://technet.microsoft.com/en-us/library/cc278098(SQL.100).aspx

Nov 01 '10 at 12:50 PM TimothyAWiseman

(comments are locked)