From the course: Microsoft Azure Database Administrator Associate (DP-300) Cert Prep by Microsoft Press

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

Implement transparent data encryption (TDE)

Implement transparent data encryption (TDE)

From the course: Microsoft Azure Database Administrator Associate (DP-300) Cert Prep by Microsoft Press

Start my 1-month free trial Buy for my team

Implement transparent data encryption (TDE)

“

- Welcome back. This is lesson 5.1, Implement Transparent Data Encryption. Transparent data encryption is the default data at rest encryption in SQL Server, Azure SQL Database, and Azure SQL Managed Instance. When you create a new Azure SQL database, for example, transparent data encryption is enabled by default. Transparent data encryption encrypts data at rest, and it does this by encrypting the SQL Server data files, the MDF and the LDF, with encryption done at the page level. Pages are encrypted as they're written to disk and then decrypted when read into memory. Two things to note about this, transparent data encryption does not increase the size of the database, but it also does not provide encryption across communication channels. It's just simply encryption data at rest. So let's walk through the steps to implement transparent data encryption. These steps are needed if you're enabling TDE in SQL Server in a virtual machine. And then we'll talk about enabling it in Azure. So…

Contents