I had it happen to me. We had an SSL certificate for a website that one of my employers ran. I actually purchased the certificate, and it secured our communications for a couple years until one day it didn't. The certificate expired and the website stopped accepting connections. If I had noticed, it might not have been a big deal. However when the owner of the company gets a call from one of his large customers, it's an much bigger issue.
If you worked at Microsoft last year when their security certificate expired, it was an even bigger deal. It's not that an affected customer that sends a note; it's affected, unaffected, and potential customers that hear about the issue from the media. It seems like tracking private virtual properties (PVPs) ought to be easy, but it's not. As pointed out in this piece, there are a number of issues at an organizational level, and while there are fixes, it takes some effort.
In many businesses that have periodic activities required for physical assets, there are often people dedicated to tracking, or performing the activity. Mechanics know about maintenance on vehicles, accountants renew leases, workers replace equipment nearing the end of service. Often the time lines and activities involved are understood, and individuals understand their responsibilities.
This showcases another area in which technology is woefully immature. Need a certificate? It takes a person with specialized knowledge to understand what's needed, purchase it, and install it. This person either then moves on to a new role without leaving instructions behind, or isn't well equipped to understand the need to track the expiration and replacement of the technical item. There often isn't even a system set up to handle replacements of these items, which might be superseded or replaced by some entirely new type of technical wizardry.
Managing and tracking PVPs is hard, and I suspect, going to get harder. Security requirements increase, technical requirements grow, and specifications change. I'd like to say I'm confident Azure (or AWS or another large service) will never have another outage because of this, but I wouldn't be surprised if they do.
Grant Fritchey, SQL Server MVP will be hosting a free seminar in Cambridge on January 10 2014. Join fellow database professionals to learn tips and best practices for SQL Server version control, continuous integration and deployment. More »
Someone has dropped a table from your database and you want to track who did it. Or someone has deleted some data from a table, but no one will say who did. In this tip, we will look at how you can use the transaction log to track down some of this information. More »
“Power BI” is an umbrella name for a lot of products, which I explain at Power BI first impressions (also I have... More »
Question of the Day
Today's Question (by Steve Jones):
I create a Central Management Server on SQLSales1. I then create a group and add SQLSales2 and SQLSales3 to the group. I want to execute a query against all three instances and decide to run it using my group on the CMS. What happens?
Think you know the answer? Click here, and find out if you are right.
We keep track of your score to give you bragging rights against your peers.
This question is worth
1 point in this category: Central Management Server (CMS).
We'd love to give you credit for your own question and answer.
To submit a QOTD, simply log in to the
Teach yourself the programming fundamentals of SQL Server 2012—one step at a time. Ideal for beginning SQL Server database administrators and developers, this tutorial provides clear guidance and practical, learn-by-doing exercises for building database solutions that solve real-world business problems.
Use in your maintenance plan when you need to rebuild indexes in all databases but it takes too long to do every single index in every database, and be too hard to maintain a specific list every time another database was added or removed. With this script you can do the whole instance but only where the index fragmentation is above a specified threshold.
Finding the MIN and MAX date - How do I approach this?
- I have a table with the following data:
EMPID EffectiveDate PrimaryRater
12345 10/10/2001 A12345
12345 07/12/2013 A12345
12345 08/18/2002 A12345
12345 07/17/1966 A12345
12345 01/01/1966 B12345
What I want to do is...
- I have 2 tables. Each one has the following columns: SSN, PKT and FICE_NBR.
I need to be able to retrieve...
I have a requirement where I have replace two different strings with another string.
i.e. if there is 'Brigade Army or...
This newsletter was sent to you because you signed up at SQLServerCentral.com.
Feel free to forward this to any colleagues that you think might be interested.
If you have received this email from a colleague, you can register to receive it here.