Ensure Databases are Encrypted with TDE

SrednjaNivo 2Automatskamssql

Opis

Ensure user databases are encrypted using Transparent Data Encryption (TDE). Backups of databases encrypted with TDE are automatically encrypted as well. Runs one sqlcmd query with its defaults (Windows authentication to the local default instance); set SQLCMDSERVER, SQLCMDUSER and SQLCMDPASSWORD for another instance or SQL authentication. Needs VIEW SERVER STATE / sysadmin-level read access.

Kako se proverava

Metod provere: SQL upit

sql_query

sqlcmd -b -h -1 -W -Q "SET NOCOUNT ON; SELECT COUNT(*) FROM sys.databases WHERE database_id > 4 AND is_encrypted <> 1;"

Očekivani izlaz: 0

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Implement TDE encryption on each user database with sensitive data. More info on how to do this is available here: https://learn.microsoft.com/en- us/sql/relational-databases/security/encryption/transparent-data-encryption

Svojstva

Operativni sistemi: Bilo koji
Oznake: mssqldatabaseencryption
Referenca: CIS Microsoft SQL Server 2025 Benchmark v1.0.0 - 7.5 Ensure Databases are Encrypted with TDE

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target mssql --level 2