Exporting the Database Encryption Key

Removing TDE from a Database: Level 4 of the Stairway to TDE

Learn how to remove TDE from a database and return it to a normal state.

A One-Slide Summary of the Differences Between TDE and Always Encrypted

Read a One-Slide Summary of the Differences Between TDE and Always Encrypted from Brent Ozar.

TDE BYOK and Geo-Replication in Azure SQL DB

Recently a customer asked me for help with setting up a test of an Azure SQL Database in the single database tier with Geo-Replication to work with Transparent Data Encryption (TDE) with a customer-managed key, also known as Bring Your Own Key (BYOK). It is very simple to do it when you use service-managed keys, […]

Configure Extensible Key Management Using Azure Key Vault - Level 3 of the Stairway to TDE

In this third level of the Stairway, we examine how to store your encryption certificate in the Azure Key Vault.

Restore a Backup of a TDE Database to Another Server: Level 2 of the Stairway to TDE

In the second level of the stairway to TDE, we examine how you can restore your databases on another instance after moving the encryption certificate.

Transparent Data Encryption Using Certificates and EKM - Level 1 of the Stairway to TDE

The first level of the Stairway to TDE will explain how the feature works and how to set this up on one of your instances and databases.

Configure SQL Server Transparent Data Encryption with PowerShell

In this article Filip Holub looks at how to configure and enable transparent data encryption for a SQL Server database using PowerShell.

6 steps to a more secure SQL database

Security is often something people think about only after they have had a problem. Given that the average cost of a data breach is $3.92 million (SecurityIntelligence 2019) and ransomware attacks have increased 97% over the past 2 years (PhishMe 2019), the "if it's not broke, don't fix it" approach can clearly be catastrophic. Here […]

Transparent Data Encryption and Extensible Key Management – Better Together

Learn how you can secure your TDE environment by separating your key from the server using Extensible Key Management.