Re: Using EFS - is there a better way?

From: Mike Epprecht \(SQL MVP\) (mike_at_epprecht.net)
Date: 11/15/05

  • Next message: Jasper Smith: "Re: Permissions WTF" 
    Date: Tue, 15 Nov 2005 23:19:43 +0100

    Hi

    The encryption is only whilst it is on disk. If you copy it to tape, the
    encryption does not follow it.

    What are you worried about that you need to encrypt your data?

    Regards
    --------------------------------
    Mike Epprecht, Microsoft SQL Server MVP
    Zurich, Switzerland

    IM: mike@epprecht.net

    MVP Program: http://www.microsoft.com/mvp

    Blog: http://www.msmvps.com/epprecht/

    "Eric" <Eric@discussions.microsoft.com> wrote in message
    news:609BCDE6-1ECB-4A79-8DA0-0DA2E970B5CC@microsoft.com...
    >I want to encrypt my bak/trn backup files. Should I just use EFS? Can
    > anyone recommend a better way to do this w/perhaps a third party tool?
    >
    > What about encrypting the mdf/ldf files? I know that performance will
    > take
    > a hit
    > but wanted some input.

  • Next message: Jasper Smith: "Re: Permissions WTF"

    Relevant Pages

    • RE: Need Advice - encrypt data in transit
      ... Network Encryption Available Using the Multi-Protocol Net Library ... Mike Epprecht, Microsoft SQL Server MVP ... > We need to encrypt data in transit between a fat client and SQL Server, ...
      (microsoft.public.sqlserver.security)
    • Re: searching for encrypted fields in data columns
      ... Why is encryption a requirement for your application? ... authentication and for secure communication in an insecure environment. ... Why would access control be more ... SQL Server MVP ...
      (comp.lang.java.databases)
    • Tape Encryption Products List
      ... thought I'd list the products I know about that support tape encryption. ... Supports ICSF hardware crypto acceleration, ... CentricStor-Decru Encryption Appliance ...
      (bit.listserv.ibm-main)
    • Re: DFHSM (and other tape) Encryption
      ... >> problem from the standpoint of efficiency is that good encryption of the ... >> wants to do tape encryption under MVS, you are also pretty much also ... You incur not only the CP overhead of of the ... archiving / recovery well in hand before adding encryption to the mix. ...
      (bit.listserv.ibm-main)
    • Re: DFHSM (and other tape) Encryption
      ... The obvious problem from the standpoint of efficiency is that good encryption of the data, which destroys apparent patterns in the data, will make tape hardware compression perform poorly. ... For a full volume dump of a 3390-3 the CPU time went from around 5 secs for uncompressed dump to around 38 secs for a compressed and encrypted dump, and that was with using the crypto engine. ...
      (bit.listserv.ibm-main)