SQLServerCentral

TDE and Stretch Databases


https://www.sqlservercentral.com/Forums/Topic1759860.aspx

By Steve Jones - SSC Editor - Tuesday, February 9, 2016 10:58 AM

How to enable TDE with a stretch database. Should be simple and similar to a TDE article.
By thomasliddledba - Monday, January 16, 2017 11:25 PM

If no one has grabbed this, I'll take a crack at the article. Let me know.
By Steve Jones - SSC Editor - Tuesday, January 17, 2017 1:14 AM

Thomas, take it.

Eric, there is no original article listed. I noted that it should be similar to a TDE article, any one. How to enable and then set up stretch, accounting for the certificates. I know you might think this is easy, but plenty of people have struggled with enabling and using TDE. That's why we are looking for an article.
By Eric M Russell - Tuesday, January 17, 2017 1:53 AM

OK, I now see this was entered under 'Articles Requested'. I thought it was a general question. Offhand, I don't know of any limitations that TDE would place on other SQL Server features, other than of course the limitation (by design) that you cannot restore or attach the database on another server without first restoring the same certificate used to encrypt the database encryption key (DEK).
By Eric M Russell - Tuesday, January 17, 2017 12:14 AM

I'm not seeing a link the original article, so I'm not sure about the question. However, regarding the question of using TDE with database Stretching, I don't see why it would be a problem. It seems to me that it would be conceptually similar to replication: the database you're stretching into can be either TDE encrypted with the same certificate, encrypted with a different certificate, or not encrypted.