Submit My Question - Recent Questions - Recent Answer

Msdn Tech >> SQL Server Katmai >> SQL Server Katmai Security

SQL Server automatic encryption

I downloaded SQL 2008 June CTP to see the new "automatic" encryption of databases. I opened a DB file in Notepad and can still see data. Is the automatic encryption not in this CTP, or does it have to be turned on somehow? This is one of the more exciting features for me.

[283 byte] By [M.Clark] at [2008-1-9]

«« Jasper using IronPython and VS 2008 August SDK
»» SQL 2005 Performance

# 1

Where have you read about this? The Microsoft SQL Server 2008 Product Overview (http://download.microsoft.com/download/a/c/d/acd8e043-d69b-4f09-bc9e-4168b65aaa71/SQL2008_ProductOverview.doc) does not mention such a feature. I does however mention support for transparent encryption, which is scheduled for a later CTP.

OleKristianBangaas at 2007-10-3 >

top of Msdn Tech,SQL Server Katmai,SQL Server Katmai Security...

# 2

Yes, it is the "transparent" encryption, which to me is "automatic" since when you tell it to encrypt, it automatically happens without any need for app changes or other changes. You say it is scheduled for a future CTP. That is what I needed to know.

Do you know any more about this feature, or where I can find information about it. For instance, is the encryption based somehow on the service or machine, where if the database is moved to another machine it could not be successfully re-attached unless it was unencrypted by someone knowing the password on the original machine first, or by the SQL Server Manager.

Thanks!

M.Clark at 2007-10-3 >

# 3

Hi, thank you for your interest. This is indeed slated for a later CTP. Regarding the re-attach, the detached database is still encrypted. To use this on a new server, you would need to migrate (backup and restore) the certificate protecting the data to your new server as well. Otherwise, the reattach will fail. This is not handled by SQL Server Manager; this is a user controlled process.

Please let me know if you would like further info or have any more questions.

Thanks,

Sung

SungMSFT at 2007-10-3 >

# 4

Will the Express version have the same encryption features? If not, what will be missing? We would like to choose SQL 2008 Express to be part of a mobile solution, and having encryption features would make it a slam dunk. Thanks

RodneyGuzman at 2007-10-3 >

# 5

Hi Rodney,

Thanks for your interest. We are only considering the transparent encryption feature for Enterprise Edition at this time and no plans have been announced to support any other SKU.

The encryption features introduced in SQL Server 2005 will continue to be availble on all SKU's.

Thanks,

Sung

SungMSFT at 2007-10-3 >

# 6

Hi Sung,

I am interested in how SQL Server is handling the Key Management part(Encryption/Decryption/Signing). I appreciate if you provide some document or link to document which explains theoritical/functionality part of SQL Server 2008 key management.

Looking for some response.

Regards

Umesh Bansal

wanni at 2007-10-3 >

# 7

Hi Umesh,

SQL Server 2008 will be introducing a new feature called "Extensible Key Management" (EKM) which allows for third party cryptographic providers and key stores to be used alongside the encryption and key management shipped as part of the server. Does your question relate to the EKM feature or general SQL Server key management?

For general SQL Server key management documentation, please refer to (NOTE: this is unchanged from SQL Server 2005):

http://msdn2.microsoft.com/en-us/library/ms189586.aspx

There is a also a TechNet presentation available:

http://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?culture=en-US&EventID=1032293594&CountryCode=US

Hope this helps,

Sung

SungMSFT at 2007-10-3 >

SQL Server Katmai

SQL Server Katmai Security

SQL Server Katmai Hot Topic

SQL Server Katmai New Topic

SQL Server Katmai

Java / MSDN / Linux Tech / PHP Tech / MSDN DotNet / MSDN TECH / Health Library / Programmers Tech / visual basic Tech / Developer Tech / Ipod faqs / Msdn China Tech