Monday, March 26, 2012

How to Encrypt a SQL Server 2000 Database

Hello,
I am looking for some hint and help on how to go about encrypting a SQL Serv
er 2000 Database. So far I have looked into the possibility of encrypting da
ta in tables using my custom functions, however this process seems pretty sl
ow and resource intensive.
Ideally I would want a solution where in the whole DB can be encrypted so th
at I don't have to make any changes to my stored procedures, functions etc.
In case someone manages to login to EM or Query Analyzer, would he be able t
o access data or modify stored procedures in such a scenario. Also would he
be able to restore the DB from a backup copy and misuse it ?
Also what are the pros and cons of using EFS on Win 2k.
TIA."Kaustav" <Kaustav@.discussions.microsoft.com> wrote in message
news:E805034F-39E2-433C-A171-818B1D30C95C@.microsoft.com...
> I am looking for some hint and help on how to go about encrypting a SQL
Server 2000 Database. So far I have looked into the possibility of
encrypting data in tables using my custom functions, however this process
seems pretty slow and resource intensive. Ideally I would want a solution
where in the whole DB can be encrypted so that I don't have to make any
changes to my stored procedures, functions etc.
You can use EFS, just be sure to encrypt the mdf & ldf files under the
credentials (logged in as) the account running MSSQLServer service. Also,
you'd need to use the same account to decrypt the files.

> In case someone manages to login to EM or Query Analyzer, would he be able
to access data or modify stored procedures in such a scenario. Also would he
be able to restore the DB from a backup copy and misuse it ?
You can properly secure SQL Server, use Windows Authentication, so you can
"lock down" who gets and does not get access. Here's a starting point with
one good link to the security white paper:
http://www.microsoft.com/sql/techin...v
er.asp

> Also what are the pros and cons of using EFS on Win 2k.
Slight degradation in performance.
Steve

No comments:

Post a Comment