TRANSPARENT DATA ENCRYPTION (TDE)

TRANSPARENT DATA ENCRYPTION (TDE) is a SQL statement in the Administration category. TDE encrypts the entire database at rest (data files, backups) transparently to the application. The syntax is CREATE DATABASE ENCRYPTION KEY ... ALTER DATABASE SET ENCRYPTION ON;. It returns encrypted database. A typical example: -- SQL Server: CREATE DATABASE ENCRYPTION KEY WITH ALGORITHM = AES_256 ENCRYPTION BY SERVER CERTIFICATE MyServerCert; ALTER DATABASE MyDatabase SET ENCRYPTION ON; -- Check encryption status: SELECT name, is_encrypted FROM sys.databases; -- MySQL: tablespace encryption CREATE TABLE sensitive_data ( id INT, ssn VARCHAR(11) ) ENCRYPTION = 'Y'; -- PostgreSQL: TDE via pg_tde extension (or filesystem encryption) -- Oracle: Transparent Data Encryption (built-in) -- TDE protects data at rest (drive theft,… A close relative is CREATE USER, which creates a new database user account. A close relative is GRANT, which grants specific privileges (SELECT, INSERT, UPDATE, DELETE, ALL) to a user on a database/table.