Man, I hate it when I mis-state things.. TDE is DB encryption, and you can encrypt the data in motion using certs.

However, I stand by my postion about whole vs. partial encryption..

Also, as a side note, I absolutely do not recommend using the EFS (Encrypted File System) manner of encryption, it is my understanding that this is effectively single threaded and it sounded like you would experience SEVERE performance degradation when using it.

CEWII