I believe that SQL2000 is not encrypted. This would be not at all likely to be PCI Compliant as SQL 2000 does not allow encryption. Who are you guys using for the Audit if I may ask?