We need to store credit cards for a limited amount of time because we charge for orders as they ship and occasionally the authorization expires before the item can ship.
I know I can use AES_256 to encrypt our credit cards but I am not sure if all I need to do is follow the directions in the "How-to" for encrypting data.
I created the master key, backed it up off the server the certificate and the symmetric key and I can encrypt and decrypt data.
Is this all I need to do or am I missing something?
Sounds like you have it under control. The 'How to' is nicely put together.
The next step is to test, test, test.
|||I have been testing and keep thinking in the back of my head "This is much too easy. I must be doing something wrong."I got the encryption working on the second try.
|||Microsoft got it right. It really shouldn't be difficult.
