0

I have an SQL Server on Google Compute's VM. I would like to use Extensible Key Management. The requirement is to have everything in GCP. Ideally I would like Google Cloud Platform to be the provider of EKM. Otherwise I will have to install a third party EKM in GCP.

I looked into Google KMS but I cannot see any integration with SQL Server. I cannot find any info about other Google services being able to manage keys and to integrate with MS SQL Server.

I am struggling to find any answers on Google.

Is there a GCP service that could do that?

UPDATE: MS SQL Server has multiple databases. I would like to have each database encrypted with a different key and allow for a regular change of keys.

Marcin Kulik
  • 845
  • 1
  • 12
  • 28

1 Answers1

0

https://cloud.google.com/compute/docs/disks/customer-managed-encryption may meet your needs. This page describes how to use CMEK keys from KMS on a Compute VM and which parts of the VM are protected.

brodheim
  • 38
  • 4
  • Thanks, I believe CMEK would allow me to encrypt a VM or a persistent disk. However my SQL Server has multiple databases and each db needs a different encryption. I am not sure if this could be applied in such scenario? Maybe if each database had a separate persistent disk but I do not think this is a practice used in managing SQL servers. – Marcin Kulik Nov 15 '22 at 10:32