Friday, March 30, 2012

If i want to encrypt my sql server database, any comments? any too

Hi,
If i want to encrypt my sql server database, do you have any comment?
Any issue for that? Any tools that is suggested to use?
--
Thanks a lot!
regards,
florenceleeHi
If you want to encrypt data, do it in your application and then store it in
SQL Server. SQL Server 2000 and below does not support encryption at data
level.
If you want to encrypt views and stored procedures, you can create the views
and SPs with the ENCRYPTION option. But, this encryption is weak and can be
cracked.
If you have business logic that is so secret, put it into your application,
where it belongs.
Regards
Mike
"Florencelee" wrote:
> Hi,
> If i want to encrypt my sql server database, do you have any comment?
> Any issue for that? Any tools that is suggested to use?
> --
> Thanks a lot!
> regards,
> florencelee|||But what if i need a tools like this?
"Mike Epprecht (SQL MVP)" wrote:
> Hi
> If you want to encrypt data, do it in your application and then store it in
> SQL Server. SQL Server 2000 and below does not support encryption at data
> level.
> If you want to encrypt views and stored procedures, you can create the views
> and SPs with the ENCRYPTION option. But, this encryption is weak and can be
> cracked.
> If you have business logic that is so secret, put it into your application,
> where it belongs.
> Regards
> Mike
> "Florencelee" wrote:
> > Hi,
> >
> > If i want to encrypt my sql server database, do you have any comment?
> > Any issue for that? Any tools that is suggested to use?
> > --
> > Thanks a lot!
> >
> > regards,
> >
> > florencelee|||Hi
What are your exact requirements?
Regards
Mike
"Florencelee" wrote:
> But what if i need a tools like this?
> "Mike Epprecht (SQL MVP)" wrote:
> > Hi
> >
> > If you want to encrypt data, do it in your application and then store it in
> > SQL Server. SQL Server 2000 and below does not support encryption at data
> > level.
> >
> > If you want to encrypt views and stored procedures, you can create the views
> > and SPs with the ENCRYPTION option. But, this encryption is weak and can be
> > cracked.
> >
> > If you have business logic that is so secret, put it into your application,
> > where it belongs.
> >
> > Regards
> > Mike
> >
> > "Florencelee" wrote:
> >
> > > Hi,
> > >
> > > If i want to encrypt my sql server database, do you have any comment?
> > > Any issue for that? Any tools that is suggested to use?
> > > --
> > > Thanks a lot!
> > >
> > > regards,
> > >
> > > florencelee|||Hi,
I want to encrypt the whole database.
Thank you.
regards,
florence
"Mike Epprecht (SQL MVP)" <mike@.epprecht.net> wrote in message
news:FBD5B65F-EC3F-4F0F-B2F4-82A1F0A91B64@.microsoft.com...
> Hi
> What are your exact requirements?
> Regards
> Mike
> "Florencelee" wrote:
> > But what if i need a tools like this?
> >
> > "Mike Epprecht (SQL MVP)" wrote:
> >
> > > Hi
> > >
> > > If you want to encrypt data, do it in your application and then store
it in
> > > SQL Server. SQL Server 2000 and below does not support encryption at
data
> > > level.
> > >
> > > If you want to encrypt views and stored procedures, you can create the
views
> > > and SPs with the ENCRYPTION option. But, this encryption is weak and
can be
> > > cracked.
> > >
> > > If you have business logic that is so secret, put it into your
application,
> > > where it belongs.
> > >
> > > Regards
> > > Mike
> > >
> > > "Florencelee" wrote:
> > >
> > > > Hi,
> > > >
> > > > If i want to encrypt my sql server database, do you have any
comment?
> > > > Any issue for that? Any tools that is suggested to use?
> > > > --
> > > > Thanks a lot!
> > > >
> > > > regards,
> > > >
> > > > florencelee|||Hi,
I want to encrypt the whole database.
"Mike Epprecht (SQL MVP)" <mike@.epprecht.net> wrote in message
news:FBD5B65F-EC3F-4F0F-B2F4-82A1F0A91B64@.microsoft.com...
> Hi
> What are your exact requirements?
> Regards
> Mike
> "Florencelee" wrote:
> > But what if i need a tools like this?
> >
> > "Mike Epprecht (SQL MVP)" wrote:
> >
> > > Hi
> > >
> > > If you want to encrypt data, do it in your application and then store
it in
> > > SQL Server. SQL Server 2000 and below does not support encryption at
data
> > > level.
> > >
> > > If you want to encrypt views and stored procedures, you can create the
views
> > > and SPs with the ENCRYPTION option. But, this encryption is weak and
can be
> > > cracked.
> > >
> > > If you have business logic that is so secret, put it into your
application,
> > > where it belongs.
> > >
> > > Regards
> > > Mike
> > >
> > > "Florencelee" wrote:
> > >
> > > > Hi,
> > > >
> > > > If i want to encrypt my sql server database, do you have any
comment?
> > > > Any issue for that? Any tools that is suggested to use?
> > > > --
> > > > Thanks a lot!
> > > >
> > > > regards,
> > > >
> > > > florencelee|||Could you explain a bit more. For what reason do you want to do this?
It makes a difference. Encrypting an entire database isn't a good idea,
except maybe if you want to take it offline and transport it somewhere
and security is a concern during the transition. You don't need SQL
Server-specific software to do that. Any one of many standard
encryption tools could encrypt a detached database or backup file.
Encryption is NOT a method of controlling access to the database. Do
that through the built-in security in SQL Server and Windows.
--
David Portas
SQL Server MVP
--sql

No comments:

Post a Comment