{"id":183,"date":"2022-01-06T11:21:51","date_gmt":"2022-01-06T11:21:51","guid":{"rendered":"https:\/\/blog.citrus-lime.com\/crmc\/?p=183"},"modified":"2022-01-06T11:21:51","modified_gmt":"2022-01-06T11:21:51","slug":"tde-database-encryption-with-on-premise-dynamics","status":"publish","type":"post","link":"https:\/\/blog.citrus-lime.com\/crmc\/tde-database-encryption-with-on-premise-dynamics\/","title":{"rendered":"TDE Database Encryption with On Premise Dynamics"},"content":{"rendered":"\n
\"TDE<\/figure><\/div>\n\n\n\n

We were tasked by a client to look at what levels of\u00a0Database Encryption (Encryption at Rest)<\/strong>\u00a0were in place and
also how we could fill in any gaps. Here in the UK we would be talking about the sensitive personal information
covered by the GDPR legislation, and how we can make it as secure as possible. The request is quite simple \u2013
\u2018please encrypt our database\u2019<\/strong><\/em>, however from a SQL novice point of view, this would require a lot of new learning
for your typical Dynamics CRM Consultant.<\/p>\n\n\n\n

Sure, I can deploy a multi\u2013server deployment of Dynamics, but we only really touch base with SQL Server and database backups, so I already knew this would be an interesting challenge\u2026<\/p>\n\n\n\n

1. Why Should you Encrypt?..<\/strong><\/p>\n\n\n\n

So, we have the correct password policy, latest CRM patches for 8.2 and the server array and network conforms to TLS 1.2. For industry standards data access and data transit is where it currently needs to be, however how secure is that data storage?<\/p>\n\n\n\n

Microsoft\u2019s example runs along the line of \u2018If someone was able to get access to your SQL Server and remove the hard drive, they could then restore the data in a secondary SQL Server\u2019. This causes a major security flaw and that is where TDE (Transparent Database Encryption) comes in!<\/p>\n\n\n\n

TDE is SQL\u2019s form of Encryption at Rest. The term \u201cdata at rest\u201d<\/em><\/strong> refers to the data, log files, and backups stored in persistent storage and allows an organisation to protect its data when not in use or when stored for audit purposes for instance<\/p>\n\n\n\n

2. Things to Consider\u2026<\/strong><\/h3>\n\n\n\n

If you ever find yourself in this domain then I thought I would stick this at the top of the blog rather than a wrap up at the end \u2013 These are things I either knew already of found out during the process;<\/p>\n\n\n\n