Re: database encryption



Can someone recommend a good highly scalable and easy to use 3rd party tool
to encrypt the contents of a disk. Keep in mind that I run a SQL Cluster. So
the disk is not local. It resides on the SAN.

TIA!

"Mike C#" <xxx@xxxxxxx> wrote in message news:Na1lg.294$B95.11@xxxxxxxxxxx

"Bahman" <Bahman@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:4C85593A-F3A3-467B-AD51-32A87A99143C@xxxxxxxxxxxxxxxx
Hello!

i am aware of the ability to encrypt something or issue a certificate for
a
column, etc.

does the sql server itself write to disk in clear text?

SQL Server stores data in binary format. Their might be some plain text
that can be seen if someone were to dissect your MDF files.

if so, is there a feature to prevent that?

There are third party software encryption tools that encrypt the actual
MDF files, or even entire hard drives.




.



Relevant Pages

  • Re: Disk level encryption
    ... Ask the vendor if they support SQL Server on it. ... permissions copies the DB off that disk, ... Rather encrypt the data in the application before you save it into the DB. ... Mike Epprecht, Microsoft SQL Server MVP ...
    (microsoft.public.sqlserver.security)
  • Re: Disk level encryption
    ... Ask the vendor if they support SQL Server on it. ... permissions copies the DB off that disk, ... Rather encrypt the data in the application before you save it into the DB. ... Mike Epprecht, Microsoft SQL Server MVP ...
    (microsoft.public.security)
  • Re: Disk level encryption
    ... Ask the vendor if they support SQL Server on it. ... permissions copies the DB off that disk, ... Rather encrypt the data in the application before you save it into the DB. ... Mike Epprecht, Microsoft SQL Server MVP ...
    (microsoft.public.win2000.security)
  • Re: GJournal (hopefully) final patches.
    ... For a couple of my smaller filesystems I reduced it to ... It seems like a reasonably modern controller and disk, ... The geom stack on my laptop currently looks something like this: ... rather than encrypt the journal). ...
    (freebsd-current)
  • Re: mlock(1)
    ... >>related to the swapsuspend encryption key on disk) is needed. ... >>usb pen to store and fetch the key... ... Encrypt _that_ with the passphrase or whatever, ...
    (Linux-Kernel)