英文:
SQL Server database encryption Standard vs Web editions
问题
数据加密在SQL Server标准版和Web版中可用。
我对Web版有一个问题，SQL Server备份是否加密？
在这个Microsoft网站上，对于Web版，"加密备份"显示为否。
我了解到非加密数据库无法有加密备份，但如果数据库已经加密，SQL Server备份是否也会被加密呢？
我还没有测试过这一点，因为我正在为客户请求设置具有静态数据加密的新服务器。
尝试决定是否使用SQL Server标准版或Web版。SQL Server Web版一直在我们基于Web的软件中表现良好，并且比SQL Server标准版更便宜。
有其他想法/建议吗？
英文:
Data encryption is available in SQL Server Standard and Web editions.
The question I have on the web edition, is the SQL Server backup encrypted?
Editions and supported features of SQL Server 2022
On this Microsoft website it states for web edition "Encrypted backup" says no.
I understand that a non encrypted database cannot have an encrypted backup, but if the database was already encrypted wouldn't the SQL Server backup also be encrypted?
I have not tested this because I am setting up new server with database encryption at rest per a customer request.
Trying to decide whether to use SQL Server Standard or Web editions. SQL Server Web edition has always worked well for our web based software and is cheaper than SQL Server Standard edition.
Any additional thoughts/advice?
答案1
得分: 1
如果数据库已经加密，SQL Server备份也会被加密吗？
是的，它会被加密。
Web Edition支持透明数据加密（TDE），TDE数据库的备份始终是加密的。
启用了TDE的数据库的备份文件也会使用数据库加密密钥进行加密。因此，当您还原这些备份时，必须提供用于保护数据库加密密钥的证书。因此，除了备份数据库之外，确保维护服务器证书的备份也是非常重要的。如果证书不再可用，可能会导致数据丢失。
备份加密功能专门用于创建非加密数据库的加密备份。
英文:
>but if the database was already encrypted wouldn't the SQL Server backup also be encrypted?
Yes it would be encrypted.
Web Edition supports Transparent Data Encryption, and backups of TDE databases are always encrypted.
> Backup files for databases that have TDE enabled are also encrypted
> with the database encryption key. As a result, when you restore these
> backups, the certificate that protects the database encryption key
> must be available. Therefore, in addition to backing up the database,
> make sure to maintain backups of the server certificates. Data loss
> results if the certificates are no longer available.
The Backup Encryption feature is specifically to create encrypted backups of non-encrypted databases.
答案2
得分: 0
Web Edition不支持这一功能。
但是，您可以通过直接将备份文件备份到加密卷（使用BitLocker或者甚至内建于NTFS/Windows的加密功能），然后在将备份文件复制到像磁带或云备份环境这样的持久存储之前，使用额外的加密工具来满足备份加密要求。
英文:
Web Edition does not support this.
However, you can easily meet backup encryption obligations separate from anything built into SQL Server by backing up directly to an encrypted volume (using BitLocker or even built into NTFS/Windows in a pinch), and then further using an additional encryption utility as (or before) you copy the backup file(s) to persistent storage like tape or cloud backup environment.
通过集体智慧和协作来改善编程学习和解决问题的方式。致力于成为全球开发者共同参与的知识库，让每个人都能够通过互相帮助和分享经验来进步。
评论