Configuring & Managing Databases

Transparent data encryption (TDE) allows SQL Server to encrypt entire databases at the file level to protect data and log files. TDE uses a database encryption key that is stored and managed securely by the SQL Server service, so the database remains encrypted at all times. The database encryption key helps provide an additional layer of protection for data without requiring changes to applications or the database schema.