23.12.2014 Views

Cleopatra Enterprise - Cost Engineering

Cleopatra Enterprise - Cost Engineering

Cleopatra Enterprise - Cost Engineering

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Installation<br />

5 Installation<br />

5.1 MS SQL server<br />

5.1.1 Introduction<br />

Security is becoming increasingly important. It is one of the critical features of a database engine, protecting<br />

the enterprise against myriad threats.<br />

Apart from the usual security of physically securing the server, backing up data regularly and putting it<br />

behind one or more firewalls if it is connected to a network, we recommend you to avoid installing SQL<br />

Server on a computer with other server applications, and enable only the minimum network protocols<br />

required.<br />

5.1.2 Encrypting connections to SQL server<br />

Microsoft SQL Server can use the Secure Sockets Layer (SSL) to encrypt data that is transmitted across a<br />

network between an instance of SQL Server and a client application.<br />

SSL can be used for server validation when a client connection requests encryption. If the instance of SQL<br />

Server is running on a computer that has been assigned a certificate from a public certification authority,<br />

identity of the computer and the instance of SQL Server is vouched for by the chain of certificates that lead to<br />

the trusted root authority. Such server validation requires that the computer on which the client application is<br />

running be configured to trust the root authority of the certificate that is used by the server.<br />

The level of encryption used by SSL, 40-bit or 128-bit, depends on the version of the Microsoft Windows<br />

operating system that is running on the application and database computers.<br />

Enabling SSL encryption increases the security of data transmitted across networks between instances of<br />

SQL Server and applications. However, enabling encryption does slow performance. When all traffic<br />

between SQL Server and a client application is encrypted using SSL, the following additional processing is<br />

required:<br />

An extra network round trip is required at connect time.<br />

Packets sent from the application to the instance of SQL Server must be encrypted by the client Net-<br />

Library and decrypted by the server Net-Library<br />

Packets sent from the instance of SQL Server to the application must be encrypted by the server<br />

Net-Library and decrypted by the client Net-Library.<br />

Also see "Encrypting Connections to SQL Server" on Microsoft's SQL server TechCenter<br />

pages for more detailed information.<br />

73

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!