Subscribe to this blog
Briefcase
Print
I’ve been looking at some security code in preparation for a few talks I plan on doing next year and there’s one thing I don’t see in many of the samples: backups.
When you get ready to encrypt data in a table, or you enable Transparent Data Encryption (TDE), you will end up creating a key of some sort, or a certificate. Some of these keys, especially the database master key, needs to be backed up. Otherwise you won’t be able to decrypt your database or data later on if you recover this database on another server.
As soon as you create a key for security, make sure you back it up right then. You might forget later, and then it might be too late. A little preparation will go a long way here.
The commands are simple, and linked below:
Securing these keys can be complex, but I would recommend that you place them in an administrative folder with limited access from anyone.
Filed under: Blog Tagged: security, sql server, syndicated
No comments.