Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

Help Using EKM with TDE Expand / Collapse
Author
Message
Posted Thursday, August 28, 2014 10:16 AM
Old Hand

Old HandOld HandOld HandOld HandOld HandOld HandOld HandOld Hand

Group: General Forum Members
Last Login: Tuesday, November 25, 2014 12:26 PM
Points: 342, Visits: 825
We need to encrypt our databases. One of the issues is that in native TDE the security keys are not managed away from the data. Based on what I've read EKM solves this issue.

I'd like to know if anyone who's worked with EKM can chime in here with their experiences. Also, does it always have to interface with a HSM or are there software based solutions that we can install ourselves onto our own hardened servers? Are there any free solutions or are all key management solutions paid?

Thank you

Post #1608341
Posted Thursday, August 28, 2014 10:47 AM


SSC-Dedicated

SSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-Dedicated

Group: Administrators
Last Login: Yesterday @ 3:05 PM
Points: 31,284, Visits: 15,750
I tech reviewed the 2005 Encryption book and at the time, all the EKM integrations were hardware appliances that cost $$. I believe Thales and Safeguard were the two I tested. They worked well, but were expensive, and you needed 2 of them to ensure you could access data.

I believe there are more providers, but I don't think there are any software only solutions. I think all items are hardware based.







Follow me on Twitter: @way0utwest

Forum Etiquette: How to post data/code on a forum to get the best help
Post #1608348
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse