Transparent data encryption

Transparent Data Encryption (often abbreviated to TDE) is a technology employed by both Microsoft and Oracle to encrypt database content. TDE offers encryption at a column, table, and tablespace level. TDE solves the problem of protecting data at rest, encrypting databases both on the hard drive and consequently on backup media. Enterprises typically employ TDE to solve compliance issues such as PCI DSS.

Microsoft offers TDE as part of its Microsoft SQL Server 2008. Oracle requires the Advanced Security Option for Oracle 10g and 11g to enable TDE. Keys for TDE can be stored in a hardware security module to manage keys across servers, protect keys with hardware, and introduce a separation of duties.

See also

• Encryption
• Hardware Security Module

Organizations offering TDE-enabled databases

• Microsoft - Microsoft SQL Server 2008
• Oracle - Advanced Security Option for Oracle 10g and 11g

Organizations offering HSMs for TDE

• Thales - Thales (formerly nCipher)

External links

• Understanding Transparent Data Encryption (TDE) (Microsoft)
• Using Transparent Data Encryption in Oracle Database 11g
• Integration Guide: Oracle Database 11g TDE (Thales)