Download eBook (PDF) - Red Gate Software

4 – Encryption Basics for SQL ServerEach of these commands contains an ENCRYPTED BY PASSWORD optionwhich protects the backup files with the defined password, as shown in Listing4-8. To recover these keys, knowledge of this password is required.Use master;GO-- backup service master keyBACKUP SERVICE MASTER KEY TO FILE ='D:\InstanceA\Backup\SMK.bak'ENCRYPTION BY PASSWORD = 'MyB@ckUpP@ssw0rd';GOUse HomeLending;GO-- backup database master keyBACKUP MASTER KEY TO FILE = 'D:\HomeLending\Backup\DMK.bak'ENCRYPTION BY PASSWORD = 'MyB@ckUpP@ssw0rd';GO-- backup certificateBACKUP CERTIFICATE MySelfSignedCertTO FILE = 'D:\HomeLending\Backup\MySelfSignedCert.bak'WITH PRIVATE KEY (DECRYPTION BY PASSWORD ='MyStr0ngP@ssw0rd2009',FILE = 'D:\HomeLending\Backup\MySelfSignedCert.pvk',ENCRYPTION BY PASSWORD = 'MyB@ckUpP@ssw0rd');GOListing 4-8: Backing up the service master key, database master key and certificate.It is highly recommended that these key backup files are stored on separatemedia from the database backup files so that, in the event that the media thatcontains the database backup files is stolen or compromised, the data containedwithin the database remains secured. The decryption of the data and filescontained in the backup media would require access to the backup media thatcontained the key backup files.93