Re: Sql 2005 - how to allow users to decrypt table data using a database certificate ??

Hello Barry,

Thank you for your feedback on our document/samples on SQL 2005 encryption
and I agree with you it will surely benefit customers. Currently all the
security related documents are listed under

http://www.microsoft.com/technet/prodtechnol/sql/2005/library/security.mspx

Please rest assured that your feedback on this is routed to the proper
channel this is a great idea for a future product/document enhancement

Based on my scope, it is usually suggested to use Symmetric keys to encrypt
key and the symmetric key can be encrypted using a certificate's public
key, so the certificate's private key is necessary for decryption. The
certificate's private key in turn can be protected either by a password or
by using a database master key.

http://blogs.msdn.com/lcris/archive/2005/10/14/481434.aspx

Also, I recommend that you refer to some useful articles written by
Laurentiu

http://blogs.msdn.com/lcris/archive/category/10357.aspx

If you have further questions, please let me know. Have a great day!

Best Regards,

Peter Yang
MCSE2000/2003, MCSA, MCDBA
Microsoft Online Partner Support

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================



This posting is provided "AS IS" with no warranties, and confers no rights.


.

Relevant Pages

  • AD replication over WAN
    ... I'm looking for some feedback from the community regarding the transfer of AD ... DNS zone information that is AD-integrated is automatically ... should one be bothering with a router-router VPN tunnel ... care to comment on the relative safety of AD encryption out-of-the-box? ...
    (Focus-Microsoft)
  • Re: Should Initialization Vectors be public ?
    ... > The purpose of Initialization Vector is to allow encryption algorithm ... Actually, as a point of clarification, IV is used for feedback purposes. ... used to achieve the cipher text. ... during the encryption process. ...
    (microsoft.public.dotnet.security)
  • Re: simplified des modes of operation
    ... encryption cycle, and the first block of data is xored with IV vector ... so how do i take feedback and make sure that only ...
    (sci.crypt)
  • simplified des modes of operation
    ... I wanted to know how to synchronize the encryption path and key ... and the first block of data is xored with IV vector ... so how do i take feedback and make sure that only ...
    (sci.crypt)