RE: Encrypt data - SQL Server 2000

From: Harbar, Spencer (spencer.harbar_at_dns.co.uk)
Date: 01/20/04

  • Next message: Petta, Tony: "RE: Local Account Vs Domain Account"
    Date: Tue, 20 Jan 2004 11:10:18 -0000
    To: <Eduardo.Ortiz@alderwoods.com>, <focus-ms@securityfocus.com>
    
    

    check out secure.data which provides a solution for your scenario. info
    at http://www.protegrity.com/products.html, this is the MSIB recommended
    partner for data encrpytion.

    also http://www.sql-shield.com/ &
    http://www.netlib.com/sql-server-encryption.htm

    hth
    Spence

     

    -----Original Message-----
    From: Eduardo.Ortiz@alderwoods.com [mailto:Eduardo.Ortiz@alderwoods.com]

    Sent: 15 January 2004 18:02
    To: focus-ms@securityfocus.com
    Subject: Encrypt data - SQL Server 2000

    Hello,

    We are implementing an Enterprise Data Warehouse. We already have data
    regarding different business process. Now we need to include Payroll
    data in our SQL Server (2000) database. Business users have specific
    security requirements about this sensitive data. They want to secure the
    following
    information:
    * Annual employee salaries
    * Commissions
    * Wages
    This information is stored in two tables and are three different
    columns.
    We have already implemented a tight security schema for the server,
    database and user groups (active directory), but business users want
    more security. Now we are planning to encrypt the data (just these three
    columns) in the database. I did not find any function in SQL Server to
    encrypt data. I found a tool provided by Application Security Inc
    (http://www.appsecinc.com) called DbEncrypt. Have you guys heard or
    worked with tool? Do you any suggestion or recommendation to encrypt the
    data?

    Thanks,
    Eduardo Ortiz

    ------------------------------------------------------------------------

    ---
    ------------------------------------------------------------------------
    ---
    ---------------------------------------------------
    This email from dns has been validated by dnsMSS Managed Email Security and is free from all known viruses.
    For further information contact email-integrity@dns.co.uk
    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------
    

  • Next message: Petta, Tony: "RE: Local Account Vs Domain Account"

    Relevant Pages

    • Re: CA for LDAPS?
      ... so that you can encrypt data w/o setting up a cert infrastructure. ... > Windows Server 2003 Security Infrastructures: ...
      (microsoft.public.win2000.active_directory)
    • Re: CA for LDAPS?
      ... so that you can encrypt data w/o setting up a cert infrastructure. ... > Windows Server 2003 Security Infrastructures: ...
      (microsoft.public.windows.server.active_directory)
    • Re: Application concerns OVER Login
      ... I don't know your exact requirements, but at least with SQL Server if you ... certainly use a third party tool to encrypt data, but the database schema ... More often than not, technology ...
      (microsoft.public.sqlserver.security)
    • Re: SQL Server Security Question
      ... SQL Server 2005 can encrypt data. ... to encrypt data without the DBA being able to decrypt it. ... One of my clients is looking for a encryption tool for SQL Server to make ... DBAs should still be able to perform administrative tasks but not ...
      (microsoft.public.sqlserver.security)
    • Re: Encrypting Data in SQL Server Tables
      ... > I was hoping that someone knew of a way to encrypt data ... > DTS the confidential data into SQL Server 2000. ...
      (microsoft.public.sqlserver.security)