Questions tagged [tde]

TDE, or Transparent Data Encryption, is used by Microsoft and Oracle to encrypt database content.

TDE Wikipedia page

141 questions
0
votes
0 answers

How can I manage Always Encrypted technique and TDE together and mitigate risks of this?

In our electronic criminal law, customer-sensitive data must be encrypted at rest and all admins working on servers and DBs must not be able to access this information clearly. Microsoft provides three methods to encrypt sensitive information. 1-…
Omar Kamel
  • 155
  • 1
  • 8
0
votes
1 answer

MariaDB TDE - how to encrypt the error log file?

(Note: I haven't used MariaDB. I'm only doing research at this point.) I read MariaDB's TDE / data-at-rest encryption support. In its Limitations section it states, "The MariaDB error log is not encrypted. The error log can contain query text and…
Vahid Pazirandeh
  • 1,552
  • 3
  • 13
  • 29
0
votes
2 answers

Is there any way to backup TDE enable Azure DB(Managed Instance)

Our requirement is to manual back up of Azure DB(MI) when an event is triggered. This db is TDE enabled. I cannot decrypt and take manual backup as decrypting db takes long time. Is there any way to back up of db (export to Azure storage) manually…
0
votes
0 answers

Connect sqlalchemy to encrypted SQL Server

I there a way to connect my flask app to SQL Server using TDE encryption? I'm using this configuration: SQLALCHEMY_DATABASE_URI = 'mssql+pymssql://%s:%s@%s/%s' % (MYSQL_USER, MYSQL_PASSWORD, MYSQL_HOST, MYSQL_DB) I saw there is a way to connect…
Sapir
  • 19
  • 2
0
votes
0 answers

Oracle TDE with java encryption

We have an application consisting of customer mobile's number , which we are encrypting using our own key and storing in database. But now we are suggested to use ORACLE KEY VAULT for managing key. I would like to know, how the key will be generated…
Muddassir Rahman
  • 976
  • 1
  • 9
  • 20
0
votes
1 answer

Oracle 19c TDE syskm

db version is 19.3. While deploying TDE in PDB, we are unable to connect to the PDB as syskm. We are able to connect to the PDB as sys user without errors. SQL> connect syskm@USA_DEV as syskm ERROR: ORA-01017: invalid username/password; logon…
R-K
  • 119
  • 1
  • 1
  • 8
0
votes
1 answer

Tomcat to oracle channel encryption using transparent data encryption

We just want to encrypt communication channel between application (tomcat) and database (oracle). Also JDBC and ODBC channels need to be encrypted as our application uses both JDBC and ODBC. We tried to follow oracle pdf but couldn't achieve it.…
0
votes
2 answers

Can Google Cloud HSM host KEK's for local Oracle databases TDE?

We are currently looking for a setup to implement Transparent Data Encyption on Oracle databases. We are looking for Cloud HSM solutions. Can Google Cloud HSM interface with local Oracle databases for TDE encryption? Thanks! Olivier
0
votes
0 answers

Is Transparent Data Encryption (TDE) appropriate for encrypting passwords?

A third-party application states that TDE is used for encrypting the password database. I don't know how appropriate this is for password storage as surely a decryption key still exists despite the fact that it is itself encrypted. The third-party…
ellefc
  • 233
  • 2
  • 9
0
votes
4 answers

Enabling TDE on Azure SQL Using Python

I am new to Python and I am trying to write some small scripts top remediate my Azure environment. I am trying to test enabling TDE on Azure SQL databases, but I can't see any sample code to help me out. Am I going on the right way using the…
0
votes
1 answer

How to back multiple master database key DEK on SQL with TDE Enable

I have an SQL instance with multiple data bases. Each of them are TDE encrypted. I know that all data bases use the same service master key, SMK, to encrypt tempdb. I have back up the SMK using: BACKUP SERVICE MASTER KEY TO FILE =…
roncansan
  • 2,310
  • 6
  • 27
  • 34
0
votes
2 answers

When to disable TDE on Azure SQL DB

Have been reading up on TDE for Azure SQL, it's on by default, you can BYOK via keyvault etc, and you can disable it at the database level. My question is what are the business/technical reasons why you would disable TDE on an Azure SQL DB? Have…
0
votes
0 answers

SQL Server TDE encryption

The question is one of my clients ask whether they can BYOK (Bring your own key). When it comes to that; 1) I couldn't find any detailed information whether we can do it for a locally hosted SQL Server. But it seems possible for Azure SQL DB. 2)…
user2058413
  • 691
  • 3
  • 10
  • 28
0
votes
0 answers

Is it overkill to encrypt an SSN before inserting into a database that is encrypted with TDE?

Our database is encrypted with TDE (Transparent Data Encryption). All the data in the database is encrypted. But when you access the database (e.g. SQL Server Management Studio) when logged in as an approved user on the domain, you do not see…
0
votes
2 answers

Create a procedure with Alter Database option

I have more than 30 dbs which are encrypted with TDE. Now I have to make a backup of each db without encryption. Following step are needed: - Set encryption off - Do a full backup of that db - Set encryption on (Sry, but I am not so good at…
Mr alex
  • 13
  • 2