Previous Topic: Transparent Data EncryptionNext Topic: Full-text Stoplists


Extensible Key Management

The SQL Server 2008 Extensible Key Management enables third-party EKM/HSM vendors to register their modules in SQL Server. When registered, SQL Server users can use the encryption keys stored on EKM modules, USB devices, or smartcards to protect database files. This enables SQL Server to access the advanced encryption features these modules support such as bulk encryption and decryption, and key management functions such as key aging, rotation, generation, retrieval, and disposal, and so on. Data is protected from database administrators except for members of the sysadmin group.