We recently were given a client requirement to encrypt all their data while at rest. They have agreed that encrypting the dbf, backup and trn files will suffice this need for them. My question is, do I need to encrypt the ldf file also? Is there any retrievable data in the ldf file that would require it to be encrypted?
+2
A:
Hi,
You can certainly read a SQL Server log file. All you need is a log analyzer of which there are many available on the internet.
You can even build your own.
Cheers, John
John Sansom
2009-02-10 16:40:24
+1, perfectly good answer, don't know why it was downvoted.
Robin Day
2009-02-10 16:44:47
+4
A:
Anything that is written to the database is in the LDF.
Depending on your Recovery model depends how long this data will be there for.
It could be until you next perform a logfile backup.
Either way, yes, you should consider it to have as much valuable information in it as your database itself.
Robin Day
2009-02-10 16:40:28