New Security Features

SQL Server 2005 provided the capability to encrypt data at the column level. However, this encryption was not transparent to the end users or applications. Encrypting and decrypting the data required coding changes to use the built-in encryption and decryption functions. SQL Server 2008 introduces transparent data encryption (TDE), which allows for encrypting the entire database without affecting client applications. The purpose of TDE is to protect sensitive data in the event a database file or backup is stolen. Encryption is done in real-time at the page level as the data is written to disk and decrypted as the data is read from disk. The encryption is based on a database encryption key (DEK), which is a symmetric key ...

Get Microsoft® SQL Server 2008 R2 Unleashed now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.