Exercise: Encrypt a Database Using TDE

Scenario

To protect all the data in the InternetSales database when it is at rest, you will encrypt it using TDE. You will then examine the encryption files.

The main tasks for this exercise are as follows:

$1.$ Create a Service Master Key using the password CRVmNe$4$jTDMIfYiFnMNp$

$2.$ Back Up the Service Master Key in the following directory: C:$\backslash$Encryption$\backslash$TDE

$3.$ Create and Back Up a Server Certificate

o The Server Certificate name to use is TDE$\_$cert with a Subject: 'exercise TDE certificate'

o The TDE$\_$cert certificate must be backed up to the following directory C:$\backslash$Encryption$\backslash$TDE$\backslash$

o The TDE$\_$cert private key must be backed up to the following directory C:$\backslash$Encryption$\backslash$TDE$\backslash$ using the password: $*$R$8$vkULA$5$aKhp$3$ekGg$1$o$3$

$4.$ Create a Database Encryption Key using the AES $256$ algorithm and Encrypt the InternetSales Database using the server certificate created earlier $$TDE$\_$cert$.$

$5.$ Examine the encryption files.