Ensure Databases are Encrypted with TDE

보통레벨 2자동mssql

설명

Ensure user databases are encrypted using Transparent Data Encryption (TDE). Backups of databases encrypted with TDE are automatically encrypted as well. Runs one sqlcmd query with its defaults (Windows authentication to the local default instance); set SQLCMDSERVER, SQLCMDUSER and SQLCMDPASSWORD for another instance or SQL authentication. Needs VIEW SERVER STATE / sysadmin-level read access.

점검 방법

감사 방식: SQL 쿼리

sql_query

sqlcmd -b -h -1 -W -Q "SET NOCOUNT ON; SELECT COUNT(*) FROM sys.databases WHERE database_id > 4 AND is_encrypted <> 1;"

예상 출력: 0

조치 방법

조치 방식: 가이드 또는 인프라 패치

Implement TDE encryption on each user database with sensitive data. More info on how to do this is available here: https://learn.microsoft.com/en- us/sql/relational-databases/security/encryption/transparent-data-encryption

속성

운영 체제: 모두
태그: mssqldatabaseencryption
참고 자료: CIS Microsoft SQL Server 2025 Benchmark v1.0.0 - 7.5 Ensure Databases are Encrypted with TDE

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target mssql --level 2