Re: backup Keys

So many thanks, wonderfull articles. In the first article it is mentioned
"Back up the SQL Server 2005 encryption keys by using the corresponding SQL
Server 2005 Transact-SQL commands."

This was exactly my question : what are the T-SQL commandes to backup keys?

Al I misunderstanding something?
Thanks again

"Steven Cheng[MSFT]" wrote:

Hello Salam,

Regarding on the symmetric and asymmetric keys in SQL Server 2005 database,
they are all stored in the database itself. Therefore, when you backup the
database, you've already backup all those symmetric and asymmetric keys in
that certain database. You can lookup those system catalog views (for
encryption) below

#Security Catalog Views (Transact-SQL)
http://msdn2.microsoft.com/en-us/library/ms178542.aspx

sys.asymmetric_keys
sys.crypt_properties

sys.certificates
sys.key_encryptions

sys.credentials
sys.symmetric_keys


Also, for SQL Server 2005 database which contains symmetric or asymmetric
keys, the important point is that you need to backup the master key of the
database. Since all those secruity/encryption objects(symmetric or
asymmetric keys) are encrypted through a hierarchical structure, and
database masterkey is the topest key in a database. Whenever you've moved a
database to other server instance, you'll surely need to import/restore the
master key so that any down level secured objects can be used. You can also
get some sense on this through the following articles:

#Improving Data Security by Using SQL Server 2005
http://www.microsoft.com/technet/itshowcase/content/sqldatsec.mspx

#Encrypting Your Valuable Data With SQL Server 2005: Part 1
http://www.sql-server-performance.com/da_encryption_2005_1.asp

Hope this helps some.

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead



==================================================

Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.



Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.

==================================================



This posting is provided "AS IS" with no warranties, and confers no rights.









.

Relevant Pages

  • Re: SQL or Access DB
    ... As far as encryption goes though... ... with Sql Server you can use SQL DMO and encrypt your stored procedures ... installation - Security was absolutely critical and in most instances, ... > then we create a nice gui around this database and sell it to automotive ...
    (microsoft.public.dotnet.languages.vb)
  • Re: database password and encryption
    ... I know the basic concepts about encryption. ... This database should be encrypted with a strong, ... way you can protect the database AT ALL. ... I could encrypt the key several times and hide the new, resulting, keys on ...
    (microsoft.public.platformsdk.security)
  • Re: Cryptography in SQL Server 2000
    ... A company is vulnerable when its security ... > database encryption solution with protected key-management software ... > tested by the SQL Server Test Lab. ...
    (microsoft.public.sqlserver.security)
  • Re: Encryption; SQL Server 2005 & Windows 2003 Server
    ... We *must* encrypt all data items in a Database. ... SQL Server 2005 Encryption places a tremendous burden on the ... Response timeare unbearable. ...
    (microsoft.public.sqlserver.security)
  • Re: Sybase to Access
    ... The Grand Master ... Have you used database encryption for SQL Server before? ... We're a fully supported platform for VB6 ADO code against SQL Server. ...
    (microsoft.public.dotnet.languages.vb)