Delphix Products

 View Only

  • 1.  MS SQL Transparent data encryption dsource.

    Posted 08-10-2021 03:47:00 PM
    Hi Community.

    We are doing a proof of concept and one of the scenarios we are trying is ingesting a MS SQL with native encryption (TDE).

    We did a first approach and everything works if it is done in the same server. Source, Staging and Target.

    But our final environment landscape will be with three different environments, the source, one staging and one target. But right now the ingestion from the source into the staging environment is failing and we have analyzed that the issue is the encryption. The first ingestion we are doing through full backups since we will not be able to connect directly to the DB when going into production.

    Regards,
    Felipe A. Hernandez.


    ------------------------------
    Felipe Hernandez
    Delphix Community Members
    ------------------------------


  • 2.  RE: MS SQL Transparent data encryption dsource.
    Best Answer

    Posted 08-10-2021 06:44:00 PM
    Hi Felipe,

    Please check our KBA on this topic:

    https://support.delphix.com/Delphix_Virtualization_Engine/MSSQL_Server/Setting_Up_SQL_Server_Transparent_Data_Encryption_(TDE)_For_Use_With_The_Delphix_Engine_(KBA1401)

    Also,
    https://support.delphix.com/Delphix_Virtualization_Engine/MSSQL_Server/FAQ%3A_SQL_Server_TDE_(KBA1091)

    Cheers,



    ------------------------------
    Paul Vero
    Principal Technical Support Engineer
    Delphix
    ------------------------------

    Original Message


  • 3.  RE: MS SQL Transparent data encryption dsource.

    Posted 08-12-2021 11:17:00 AM
    Edited by Felipe Hernandez 08-12-2021 11:19:04 AM

    Hi Paul,

    Thank you very much for the information it was really useful.

    We were able to ingest the TDE Db into the staging server, but now we are facing a new issue where we cannot generate any vDBs.

    The error which publish the engine is:

    Recovery failed for virtual database "vDB"
    exception.db.mssqlvdb.vdb.restore.failed


    Suggested Action

    Make sure that the SQL Server instance "MSSQLSERVER" on the target host "1.1.1.1" is up and that the user "delphix" has privileges to restore a database on the host.

    The thing is that the target server is the same as the staging, so the certificates are already created and we can create non encrypted vDBs.

    Regards.
    ------------------------------
    Felipe Hernandez
    Community Member
    Cognizant Technology Solutions
    ------------------------------

    Original Message


  • 4.  RE: MS SQL Transparent data encryption dsource.

    Posted 08-12-2021 11:48:00 AM
    Hi Felipe,

    The message isn't providing a lot of detail - you can check SQL Server errorlogs for more info - the recovery is failing, and this is what has to happen before starting the VDB.  Presumably this is same SQL Server instance, and if non encrypted VDBs are okay, it seems permissions are proper.

    If the issue is encryption related you might require Microsoft assistance.
    I suggest you open a case with Delphix so we can check debug logs on the engine.
    It will be helpful if you also provide Windows files per this KBA if you open a case with us:

    https://support.delphix.com/Delphix_Virtualization_Engine/MSSQL_Server/Collecting_Diagnostics_from_SQL_Server_Hosts_for_Delphix_Support_Cases_(KBA1187)

    Cheers,
    -Paul



    ------------------------------
    Paul Vero
    Principal Technical Support Engineer
    Delphix
    ------------------------------

    Original Message


  • 5.  RE: MS SQL Transparent data encryption dsource.

    Posted 08-12-2021 03:51:00 PM
    Hi Paul.

    Thank you very much for your inputs and help.

    It seems that the server I was using as target did not had the TDE support completely installed and when trying to generate the new DB from the dsource was failing.

    Have a great day.

    Regards.

    ------------------------------
    Felipe Hernandez
    Community Member
    Cognizant Technology Solutions
    ------------------------------

    Original Message


Related Content