Transparent data encryption: Difference between revisions

Revision as of 21:46, 3 November 2013

Revision as of 21:46, 3 November 2013

Line 1:

'''Transparent Data Encryption''' (often abbreviated to '''TDE''') is a technology employed by both [[MicrosofMicrosoft]] and [[Oracle Corporation|Oracle]] to [[encryption|encrypt]] [[database]] content. TDE offers encryption at a [[Column (database)|column]], [[Table (database)|table]], and [[tablespace]] level. TDE solves the problem of protecting data at rest, encrypting databases both on the hard drive and consequently on [[backup]] media. Enterprises typically employ TDE to solve compliance issues such as [[PCI DSS]].

Microsoft offers TDE as part of its [[Microsoft SQL Server]] 2008, SQL Server 2008 R2 and SQL Server 2012. TDE is only supported on the Evaluation, Developer, Enterprise and Datacenter versions of MicrosofMicrosoft SQL Server. SQL TDE is supported by [[Hardware Security Module]]s from Townsend Security and SafeNet, Inc.

Oracle requires the Advanced Security Option for Oracle 10g and 11g to enable TDE. Oracle TDE addresses encryption requirements associated with public and private privacy and security mandates such as PCI and [[California]] [[SB 1386]]. Oracle Advanced Security TDE column encryption was introduced in Oracle Database 10g Release 2. Oracle Advanced Security TDE tablespace encryption and support for [[Hardware Security Module]]s (HSM) were introduced with Oracle Database 11gR1. Keys for TDE can be stored in an HSM to manage keys across servers, protect keys with hardware, and introduce a separation of duties.