Hi Team,

We are evaluating to use SQL server Filestream feature to store and perform full text indexed search on stored files. However, as per our client IT compliance we have a requirement of applying encryption on "data on rest". We came across support of Transparent Data Encryption (TDE) on database however as per my knowledge TDE does not encrypt FILESTREAM data.

To fulfill our client compliance requirement, we are evaluating to use Windows Bitlocker that will even encrypt files on file system (including the FILESTREAM managed folders). However, I am not sure about how SQL Server full text indexing search will behave after applying the encryption on file system using Bitlocker.

Does encryption using Bitlocker is transparent to SQL Server? Or Do you have any other suggested approach to encrypt FILESTREAM files that has no impact on search?

Regards,

Aditya

Hello,

As you can read on the following post, you can use Bitlocker and Windows Encrypting File System (EFS) with the account SQL Server is running.

http://sqlblog.com/blogs/michael_coles/archive/2010/03/08/t-sql-tuesday-004-why-doesn-t-tde-encrypt-my-filestream-data.aspx

Please read the note create by David Baxter (MSFT) about Filestream and backups when using EFS on the following thread:

https://social.msdn.microsoft.com/forums/sqlserver/en-US/fd5acaca-9911-4168-a82d-02a92c0d5a80/can-filestream-directory-containers-be-encrypted-with-efs

Hope this helps.

Regards,

Alberto Morillo
SQLCoffee.com

• Edited by Alberto MorilloMVP, Moderator 15 hours 56 minutes ago