58638: Acronis Cyber Protect: Backing Up SQL Databases with Transparent Data Encryption

use Google Translate

Applies to: 

Last update: 14-11-2022

Both Acronis Cyber Protect Cloud and Acronis Cyber Protect 15 support SQL databases with Transparent Data Encryption.

Backup

Database backup

In Acronis Cyber Protect you can either back up SQL databases by a dedicated backup plan or create a backup of your entire server with enabled application backup.

  • Follow this article to back up SQL databases
  • Follow this article to back up the entire machine with application-aware backup enabled

Certificate backup

Back up the certificate file containing database encryption key as described in this manual. We recommend saving the backup in a remote location, this way you will be able to restore the certificate and thus databases in case of SQL server malfunction or hardware failure.

Restore

To restore SQL databases with Transparent Data Encryption first restore the certificate, and then restore the databases.

Certificate restore

  1. Move or copy the backup of the server certificate and the private key file to the target SLQ server, place it to the same location as on the source server.
  2. Create a database master key on the destination instance of the target SQL Server:
    USE master;
    GO
    CREATE MASTER KEY ENCRYPTION BY PASSWORD = '<password>';
    GO
    where <password> is the password that is used to encrypt the master key in the database.
    For more details see this Microsoft article.
  3. Recreate the server certificate by using the certificate backup. The password must be the same as the password used for backup creation.
    CREATE CERTIFICATE TestSQLServerCert
    FROM FILE = 'TestSQLServerCert'
    WITH PRIVATE KEY
    (
    FILE = 'SQLPrivateKeyFile',
    DECRYPTION BY PASSWORD = '<password>'
    );
    GO
    For more details see this Microsoft article.

Database restore

In both Acronis Cyber Protect Cloud and Acronis Cyber Protect 15 you can either restore directly to the target SQL server instance or restore databases as files and attach them to the target SQL server afterwards. To restore directly to the SQL server instance, Agent for SQL should is installed on the machine running the instance.

For detailed instructions see these articles:

 

Tags: