Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2008 Forums
 SQL Server Administration (2008)
 Transparent Data Encryption (TDE)

Author  Topic 

ravilobo
Master Smack Fu Yak Hacker

1184 Posts

Posted - 2010-07-28 : 13:38:40
I am exploring TDE; I have a couple of questions.

1. I found that as long as one has the certificate, the encrypted DB can be restored on any server. How does TDE differs from backup with a password?

2. If in a table 2 cells have same values (e.g. ABCD123), does the encrypted values at the disk will have the same values as well? If Yes, why TDE doesn’t benefit from database compression?




------------------------
I think, therefore I am - Rene Descartes

Randall Neth
Starting Member

1 Post

Posted - 2010-08-04 : 00:56:29
1. TDE requires certificate and password whereas Backup with password is only as secure as password.
2. TDE is encrypted at the file level not the cell level. Encrypted data compresses significantly less than unencrypted data.
Go to Top of Page

ssivaprasad
Starting Member

9 Posts

Posted - 2010-08-06 : 09:25:59

TDE protects data "at rest", meaning the data and log files. The database can be restored by using the correct certificate and Key. When enabling TDE, you should immediately back up the certificate and the private key associated with the certificate


Encrypted data compresses significantly less than equivalent unencrypted data. If TDE is used to encrypt a database, backup compression will not be able to significantly compress the backup storage. Therefore, using TDE and backup compression together is not recommended.

Sivaprasad S - SIVA

http://sivasql.blogspot.com
Go to Top of Page
   

- Advertisement -