Administration
CAKM for Microsoft SQL Server EKM provides data encryption capabilities via Microsoft SQL Server Extensible Key Management (EKM).
It allows the users to perform Transparent Data Encryption (TDE) and cell level encryption, using the CipherTrust Manager as an external Key Manager.
The advantages of using the CipherTrust Manager are as follows:
Additional security is provided by separation of administrative access. For example, the system can be set up so that CipherTrust Application Data Protection Security Administrator can access only the keys, and the database administrator can access only the database.
Helps achieve PCI security standards.
Centralized storage and management of encryption keys.
Supported Product Versions
Microsoft SQL Server
MSSQL Server 2012
MSSQL Server 2014
MSSQL Server 2016
MSSQL Server 2017
MSSQL Server 2019
CipherTrust Manager
- CipherTrust Manager 2.3.0 and higher
Note
Migration from VKM to CAKM for Microsoft SQL Server EKM provider is supported from CipherTrust Manager 2.5.2 and higher.
Supported Algorithms and Key Size
Refer Supported Algorithms and Key Size
Note
To upgrade from SafeNet MSSQL EKM provider to CAKM for Microsoft SQL Server EKM Provider, refer Upgrading CAKM for Microsoft SQL Server EKM Provider.
To migrate from Vormetric Key Management (VKM) to CAKM for Microsoft SQL Server EKM Provider, refer VKM to Microsoft EKM.