Ensure Databases are Encrypted with TDE

СредњаНиво 2Аутоматскаmssql

Опис

Ensure user databases are encrypted using Transparent Data Encryption (TDE). Backups of databases encrypted with TDE are automatically encrypted as well. Runs one sqlcmd query with its defaults (Windows authentication to the local default instance); set SQLCMDSERVER, SQLCMDUSER and SQLCMDPASSWORD for another instance or SQL authentication. Needs VIEW SERVER STATE / sysadmin-level read access.

Како се проверава

Метод провере: SQL упит

sql_query

sqlcmd -b -h -1 -W -Q "SET NOCOUNT ON; SELECT COUNT(*) FROM sys.databases WHERE database_id > 4 AND is_encrypted <> 1;"

Очекивани излаз: 0

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Implement TDE encryption on each user database with sensitive data. More info on how to do this is available here: https://learn.microsoft.com/en- us/sql/relational-databases/security/encryption/transparent-data-encryption

Својства

Оперативни системи: Било који
Ознаке: mssqldatabaseencryption
Референца: CIS Microsoft SQL Server 2025 Benchmark v1.0.0 - 7.5 Ensure Databases are Encrypted with TDE

Проверите овај рачунар

Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.

shell

tmaegis scan --target mssql --level 2