Backup SQLServer Database with security

Question

Backup SQLServer Database with security

DAMAREE NOORMAHOMED

Newbie

Points: 2
More actions
April 7, 2004 at 2:06 am

#84864

I am new to MSSqlServer 2000 and I am doing a backup of a database using the maintenance plan and I would like to know how to put a password on the backup file since anyone having access with the backup file can easily restore the database and get access to secured data...or this is not the way to do the backup and so what is the solution to have a secured backup...

Viewing 6 posts - 1 through 6 (of 6 total)

You must be logged in to reply to this topic. Login to reply

Steve Jones - SSC Editor SSC Guru Points: 738693 More actions · Answer 1

I don't think you can do this on the maintenance plan, but you can do this with scripting. However, if the password changes, you need VERY good documentation about when it changes, so you can restore. Also, how many people will have the password? Who will verify it? And if it's more than you, do you think it's that secure? If someone gave the other guy $100 to get the backup password, do you think he'd give it up?

Other than for sending through the mail, not sure this helps for a regular backup or is worth the hassle.

Sopheap Suy SSCertifiable Points: 7893 More actions · Answer 2

You could also set the baup folder to only allow administrators group and the sql service account to have full access, and then remove everyone out of that backup folder. This way, only limited number of people/services has access to the directory.

mom

K. Brian Kelley SSC Guru Points: 114704 More actions · Answer 3

Also, the backup password merely stops someone from restoring the backup to SQL Server. Open up a backup file with a text editor and you'll be amazed at the information you can uncover. There is no encryption on the backup file, even with a password. You'll need to use a 3rd party product to do encryption, but even then you still run into the same issue as what Steve has described.

K. Brian Kelley
@kbriankelley

DAMAREE NOORMAHOMED Newbie Points: 2 More actions · Answer 4

Thanks a lot guys for all your answers and queries raised.

The following situation now prevails

(1) IT administrators should not have access to the database or backups

(2) The only solution will be to use another backup solution but with your experience and keeping in mind only Superuser using the database can do the job, which backup solution must I use.

Thanks again

Noor

Steve Jones - SSC Editor SSC Guru Points: 738693 More actions · Answer 5

Litespeed will do the job for you, encrypts the file. You still have the password management problem. Don't take this too lightly, if you do, it could be your job.