The Backup and Connection Encryption module provides you with the instructions and devices to develop your hands-on skills in the following topics.

  • Configuring Secure Sockets Layer (SSL) to encrypt data
  • Working with encrypted backup files

Lab time: It will take approximately 45 minutes to complete this lab.

Exam Objectives

Two exam objectives are covered in this lab.

  • Create an encrypted backup file using the asymmetric key
  • Configure SSL to encrypt data that is transmitted across a network between an instance of SQL Server and a client application

Exercise 1 - Configuring Secure Sockets Layer (SSL) to Encrypt Data

SQL Server supports Secure Sockets Layer (SSL). Therefore, you can use SSL to encrypt the network data transmitted between the SQL Server and the client application. SSL encryption protects and safeguards the data. However, it can slow down the server performance. SSL encryption validates the data using certificates.

In this exercise, you will learn to configure SSL to encrypt the database data by performing the following tasks:

  • Add the Certificates snap-in using Microsoft Management Console.
  • Install the certificate using Certificate Enrollment wizard.
  • Start the SQL Server service and enable SSL encryption.

Exercise 2 - Working with Encrypted Backup Files

In SQL Server 2016, you can encrypt the database data during the backup process. This helps to protect the data from harmful security threats. You can create an encrypted backup file after specifying the encryption algorithm and the encryptor. The encryptor can be a certificate or an asymmetric key. Before you encrypt the database backup, you must create a database master key for the master database and a certificate or an asymmetric key.

In this exercise, you will create an asymmetric key and use it to create an encrypted backup file of the database.

Comprehensive Learning

See the full benefits of our immersive learning experience with interactive courses and guided career paths.