Geoff A (8/16/2012)
nice article. key points covered very well.we use TDE. we have about half the databases encrypted. the others are not.
i noticed less than 5% increase in CPU usage implemening TDE. I find it to be a great feature.
Hi
thanks for your feedback. yes it is a great feature but it doesn't work well in all scenarios and this is what users should be aware of before implementing.
As an example, If all you want TDE for is to protect the disk files then NTFS ACLs would probably be less hassle and more appropriate that coupled with securing the rest of the Windows server platform
-----------------------------------------------------------------------------------------------------------
"Ya can't make an omelette without breaking just a few eggs" 😉