Database Backup Encryption in SQL Server
Database Backup Encryption in SQL Server
SQL Server
In this training
• Key challenges in securing data
• What database encryption is?
• Types of Encryption
• Hands-on training
Database Backup with Encryption
Almost every organization has a challenge of protecting the data. It is almost
impossible to run a business without protecting the sensitive data. This feature
comes handy where backups are managed and handled at a remote site or
cloud. In order to encrypt the backup, we will need a certificate. And, in order to
create a certificate, we will need a master key for the database.
What database encryption is?
• Encryption is the process of converting human-readable data (plaintext)
into unintelligible cipher text. This scrambling of data is the result of an
algorithmic operation that uses a cryptographic key. Simply put, encryption
takes your data and makes it random enough so that anybody who steals it
can’t read it unless they have the key to turn it back into a legible form.
• Starting in SQL Server 2014 (12.x), SQL Server has the ability to encrypt the
data while creating a backup. By specifying the encryption algorithm and
the encryptor (a Certificate or Asymmetric Key) when creating a backup,
you can create an encrypted backup file.
What database encryption is? (Continue)
• Encryption Algorithm: The supported encryption algorithms are: AES 128,
AES 192, AES 256, and Triple DES
• The database master key is a symmetric key that is used to protect the
private keys of certificates and asymmetric keys that are present in the
database.
• The use of encryption is necessary if we want privacy and for protecting our
data at rest, in use, or in motion.