SQL Security

• orcking

  Grasshopper

  Points: 10

  More actions

  February 24, 2018 at 9:17 am

  #336339

  Hi I have SQL Express 2014

  Is it possible to  limit process access to  a signed  program with a digital certificate.
  I know you can have login triggers and check for application name, but can you check for the accessing application if it is digitally signed to a company or identity?

  Also what is the best way to encrypt the backup from a DB (as with encryption) is not available on SQL Express

  Thanks

• Alexander Zhang

  Default port

  Points: 1497

  More actions

  February 26, 2018 at 10:21 am

  #1981143

  orcking - Saturday, February 24, 2018 9:17 AM

  Hi I have SQL Express 2014

  Is it possible to  limit process access to  a signed  program with a digital certificate.
  I know you can have login triggers and check for application name, but can you check for the accessing application if it is digitally signed to a company or identity?

  Also what is the best way to encrypt the backup from a DB (as with encryption) is not available on SQL Express

  Thanks

  1. You probably can check encrypt_option
      SELECT *
      FROM sys.dm_exec_connections
      WHERE encrypt_option = 'TRUE'

  2. You probably need 3rd Backup tool to encrypt backup for SQL Express.

  GASQL.com - Focus on Database and Cloud

• Joie Andrew

  One Orange Chip

  Points: 27360

  More actions

  March 2, 2018 at 3:19 pm

  #1981831

  For the backup encryption if you cannot go to a version/edition that supports backup encryption or TDE you can try encryption from another angle. Things like whole disk encryption of the disks you are writing to, or file-based encryption, like EFS of the directory your backups are going to. Probably depends on what you are trying to accomplish though.

  Joie Andrew
  "Since 1982"