Extensible Key Management functionality

Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

All Forums

SQL Server 2008 Forums

SQL Server Administration (2008)

Extensible Key Management functionality

Author

Topic

sghasemi
Starting Member

2 Posts

Posted - 2012-09-06 : 01:22:59

Hi,

I wnat to know about EKM functionality. Does it encrypt and decrypt data? if yes, which data?

which keys are maintained by ekm in sql server 2008?

Thanks

TownsendSecurity
Starting Member

1 Post

Posted - 2012-09-10 : 18:08:23

Transparent Data Encryption (TDE) on SQL Server 2008/2012 Enterprise Edition and above allows you to encrypt your database without changing your applications - a really cool feature. Extensible Key Management (EKM) allows you to get your encryption keys off of your SQL Server and onto an encryption key management HSM (a security best practice). Otherwise you are essentially leaving your house keys taped to your front door. My company sells an Encryption Key Management HSM and can help you with any questions that you might have.

Hear are some additional resources to help you out with your research.

Podcast: Encryption Key Management and SQL Server 2008/2012 - http://bit.ly/TKAZpg
White Paper: Encryption Key Management and SQL Server 2008/2012 - http://bit.ly/U58Uq2
Blog: Lots of great information on TDE, EKM, and encryption key management - http://bit.ly/Rz5U95
Video: Setting Up TDE & EKM on SQL Server 2008/2012 - http://bit.ly/UFnQ0g

sghasemi
Starting Member

2 Posts

Posted - 2012-09-21 : 11:03:15

Thanks TownsendSecurity
Your explanation and links were so useful.

Subscribe to SQLTeam.com

SQLTeam.com Articles via RSS

SQLTeam.com Weblog via RSS

- Advertisement -

Resources