Transparent data encryption: Difference between revisions

Revision as of 09:47, 27 April 2019

Revision as of 19:57, 14 October 2019

Line 2:

'''Transparent Data Encryption''' (often abbreviated to '''TDE''') is a technology employed by [[Microsoft]], [[IBM]] and [[Oracle Corporation|Oracle]] to [[encryption|encrypt]] [[database]] files. TDE offers encryption at file level. TDE solves the problem of protecting [[data at rest]], encrypting databases both on the hard drive and consequently on [[backup]] media. It does not protect [[data in transit]] nor [[data in use]]. Enterprises typically employ TDE to solve compliance issues such as [[PCI DSS]] which require the protection of data at rest.

Microsoft offers TDE as part of its [[Microsoft SQL Server]] 2008, 2008 R2, 2012, 2014 and 2016.<ref>{{Cite news|url=https://info.townsendsecurity.com/sql-server-tde-vs-cell-level-encryption-a-brief-comparison|title=SQL Server TDE vs CLE|date=|work=|access-date=2017-06-02|archive-url=|archive-date=|dead-url=|language=en}}</ref> TDE is only supported on the Evaluation, Developer, Enterprise and Datacenter editions of Microsoft SQL Server. SQL TDE is supported by [[Hardware Security Module]]s from Thales e-Security, Townsend Security and SafeNet, Inc.

IBM offers TDE as part of [[IBM Db2|Db2]] as of version 10.5 fixpack 5<ref>https://www.ibm.com/support/knowledgecenter/SSEPGG_10.5.0/com.ibm.db2.luw.wn.doc/doc/c0061179.html</ref>. It is also supported in cloud versions of the product by default, Db2 on Cloud and Db2 Warehouse on Cloud.