Sharepoint configuration storage
Question : Are there concerns over the security of SharePoint for configuration storage If so how do you mitigate the security issue(s)?Thanks
May 26th, 2011 2:06pm
Hi J9marie,
By default, SharePoint databases that store all content are not encrypted. The data within them is stored in a format that can be viewed if an administrator
or backup operator has access to them. Indeed, if a content database is taken to a different farm, all content can be easily viewed simply by the administrator resetting the security credentials for the site collections.
This presents a challenge for many organizations that need to demonstrate that the data stored within SharePoint is properly secured and encrypted,
and that if backup tapes are lost or stolen, the data will not be at risk of compromise. For these types of scenarios, Microsoft provides for a SQL encryption option known as Transparent Data Encryption (TDE), which allows for the databases to be fully encrypted
on the SQL server without the application—in this case, SharePoint—being aware that there is any encryption at all.
Thanks & Regards,
Peng Lei
Free Windows Admin Tool Kit Click here and download it now
May 30th, 2011 4:29am