Encryption with Analysis Services 2005

As I understand it SSAS encrypts its data by default; however, I'm looking for strategies on encrypting data in the underlying datawarehouse. If you have a column encrypted in the datawarehouse, what are the options to expose that data, selectively of course, through Analysis Services? The only solution I've found is to bind a dimension to a view in the datasource and have that view decrypt the column. The dimension attribute could then be selectively exposed based on the role(s) the user has access to.

Is this the BEST way to do it? Are there other options and considerations? Are there any great whitepapers on this subject? I haven't found any myself.

Thanks in advance,

Terry

Havent seen any whitepapers on the subject.

Another idea for you to consider is to create a named query in Analysis Services DSV. See if you can use that to skip creating a view in relational database.

Edward Melomed.
--
This posting is provided "AS IS" with no warranties, and confers no rights.

|||I am working with SQL server 2005 analysis and reporting services. I am

instructed to create a cube for a database using analysis services and
then replicate it so as to produce reports online by reporting services

when requested by clients. I am able to create the cube and also deploy

the report made, in HTTP separately. But the following doubts arise
during the Cube deployment:

The Cube was created as per the requirements by my team lead. Then I
used the deployment wizard in the analysis services 2005 to convert it
into XML script. Using the SQL Management Studio I opened it as
Analysis Server scripts and used the local host as the system in the
connections windows then loaded the XML script into the Queries window
as a XMLA query and executed it. What has to be done after this in
order to use it as a production server?

Once the production server is setup and the connection is made with the

staging server, How can we set the timings to when the updating of the
production server has to be set in terms of hours, days or weeks?

Hoping these doubts would be clarified as early as possible.

encryption in MSSQL7.0

Hi,
Does MSSQL7.0 encrypts data using ssl like mssql2000? What
is the best way to securely transfer data in mssql7.0? Any
suggestion on the same is appreciated...
regards,
bharathThe only built-in option I know of in 7.0 is Multiprotocol and specify in
that setting that you want encryption. Or do the encryption at the OS
(IPSEC) or HW level.
--
Tibor Karaszi, SQL Server MVP
Archive at:
http://groups.google.com/groups?oi=djq&as_ugroup=microsoft.public.sqlserver
"bharath" <anonymous@.discussions.microsoft.com> wrote in message
news:04c101c3bec0$866b40c0$a501280a@.phx.gbl...
> Hi,
> Does MSSQL7.0 encrypts data using ssl like mssql2000? What
> is the best way to securely transfer data in mssql7.0? Any
> suggestion on the same is appreciated...
> regards,
> bharath|||Hi tibor,
Does this mean that MSSQL 7.0 supports SSL?
>--Original Message--
>The only built-in option I know of in 7.0 is
Multiprotocol and specify in
>that setting that you want encryption. Or do the
encryption at the OS
>(IPSEC) or HW level.
>--
>Tibor Karaszi, SQL Server MVP
>Archive at:
>http://groups.google.com/groups?
oi=djq&as_ugroup=microsoft.public.sqlserver
>
>"bharath" <anonymous@.discussions.microsoft.com> wrote in
message
>news:04c101c3bec0$866b40c0$a501280a@.phx.gbl...
>> Hi,
>> Does MSSQL7.0 encrypts data using ssl like mssql2000?
What
>> is the best way to securely transfer data in mssql7.0?
Any
>> suggestion on the same is appreciated...
>> regards,
>> bharath
>
>.
>|||No, the only built-in encryption in SQL7 is the one that you can configure
the Multiprotocol netlib to use. You configure this in Client and Server
Network Utility, and it only applies to traffic that uses the Multiprotocol
Netlib.
--
Tibor Karaszi, SQL Server MVP
Archive at:
http://groups.google.com/groups?oi=djq&as_ugroup=microsoft.public.sqlserver
"bharath" <anonymous@.discussions.microsoft.com> wrote in message
news:051001c3bf84$9fa89640$a401280a@.phx.gbl...
> Hi tibor,
> Does this mean that MSSQL 7.0 supports SSL?
> >--Original Message--
> >The only built-in option I know of in 7.0 is
> Multiprotocol and specify in
> >that setting that you want encryption. Or do the
> encryption at the OS
> >(IPSEC) or HW level.
> >
> >--
> >Tibor Karaszi, SQL Server MVP
> >Archive at:
> >http://groups.google.com/groups?
> oi=djq&as_ugroup=microsoft.public.sqlserver
> >
> >
> >"bharath" <anonymous@.discussions.microsoft.com> wrote in
> message
> >news:04c101c3bec0$866b40c0$a501280a@.phx.gbl...
> >> Hi,
> >>
> >> Does MSSQL7.0 encrypts data using ssl like mssql2000?
> What
> >> is the best way to securely transfer data in mssql7.0?
> Any
> >> suggestion on the same is appreciated...
> >>
> >> regards,
> >> bharath
> >
> >
> >.
> >sql

Encryption

Do you guys encrypt data on SQL 2K? If you do, you prefer server side
(data sent to server and SQL encrypts data before saving) or client side
(data encrypted before sent to server? We are looking at encryption to
protect sensitive data such as SSN's and still don't know what is the right
way to start and what is the pros and cons for each approach? What tools do
you guys use for this purpose? Thanks for your input.Check the encryption section in this FAQ:
http://www.sqlsecurity.com/DesktopDefault.aspx?tabid=22
Some of the third party product sites have white papers as
well.
-Sue
On Mon, 7 Mar 2005 10:10:21 -0800, "ME" <ME@.hotmail.com>
wrote:
>Do you guys encrypt data on SQL 2K? If you do, you prefer server side
>(data sent to server and SQL encrypts data before saving) or client side
>(data encrypted before sent to server? We are looking at encryption to
>protect sensitive data such as SSN's and still don't know what is the right
>way to start and what is the pros and cons for each approach? What tools do
>you guys use for this purpose? Thanks for your input.
>|||You might investigate the Microsoft Crypto API. The Interop.Capicom dll is
included in the Platform SDK
"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
news:3mls21drp8ss6noflbg3ujao1dt2l9gle0@.4ax.com...
> Check the encryption section in this FAQ:
> http://www.sqlsecurity.com/DesktopDefault.aspx?tabid=22
> Some of the third party product sites have white papers as
> well.
> -Sue
> On Mon, 7 Mar 2005 10:10:21 -0800, "ME" <ME@.hotmail.com>
> wrote:
> >Do you guys encrypt data on SQL 2K? If you do, you prefer server side
> >(data sent to server and SQL encrypts data before saving) or client side
> >(data encrypted before sent to server? We are looking at encryption to
> >protect sensitive data such as SSN's and still don't know what is the
right
> >way to start and what is the pros and cons for each approach? What tools
do
> >you guys use for this purpose? Thanks for your input.
> >
>

Encryption

Do you guys encrypt data on SQL 2K? If you do, you prefer server side
(data sent to server and SQL encrypts data before saving) or client side
(data encrypted before sent to server? We are looking at encryption to
protect sensitive data such as SSN's and still don't know what is the right
way to start and what is the pros and cons for each approach? What tools do
you guys use for this purpose? Thanks for your input.Check the encryption section in this FAQ:
http://www.sqlsecurity.com/DesktopDefault.aspx?tabid=22
Some of the third party product sites have white papers as
well.
-Sue
On Mon, 7 Mar 2005 10:10:21 -0800, "ME" <ME@.hotmail.com>
wrote:

>Do you guys encrypt data on SQL 2K? If you do, you prefer server side
>(data sent to server and SQL encrypts data before saving) or client side
>(data encrypted before sent to server? We are looking at encryption to
>protect sensitive data such as SSN's and still don't know what is the right
>way to start and what is the pros and cons for each approach? What tools d
o
>you guys use for this purpose? Thanks for your input.
>|||You might investigate the Microsoft Crypto API. The Interop.Capicom dll is
included in the Platform SDK
"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
news:3mls21drp8ss6noflbg3ujao1dt2l9gle0@.
4ax.com...
> Check the encryption section in this FAQ:
> http://www.sqlsecurity.com/DesktopDefault.aspx?tabid=22
> Some of the third party product sites have white papers as
> well.
> -Sue
> On Mon, 7 Mar 2005 10:10:21 -0800, "ME" <ME@.hotmail.com>
> wrote:
>
right[vbcol=seagreen]
do[vbcol=seagreen]
>

Encryption

Do you guys encrypt data on SQL 2K? If you do, you prefer server side
(data sent to server and SQL encrypts data before saving) or client side
(data encrypted before sent to server? We are looking at encryption to
protect sensitive data such as SSN's and still don't know what is the right
way to start and what is the pros and cons for each approach? What tools do
you guys use for this purpose? Thanks for your input.
Check the encryption section in this FAQ:
http://www.sqlsecurity.com/DesktopDefault.aspx?tabid=22
Some of the third party product sites have white papers as
well.
-Sue
On Mon, 7 Mar 2005 10:10:21 -0800, "ME" <ME@.hotmail.com>
wrote:

>Do you guys encrypt data on SQL 2K? If you do, you prefer server side
>(data sent to server and SQL encrypts data before saving) or client side
>(data encrypted before sent to server? We are looking at encryption to
>protect sensitive data such as SSN's and still don't know what is the right
>way to start and what is the pros and cons for each approach? What tools do
>you guys use for this purpose? Thanks for your input.
>
|||You might investigate the Microsoft Crypto API. The Interop.Capicom dll is
included in the Platform SDK
"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
news:3mls21drp8ss6noflbg3ujao1dt2l9gle0@.4ax.com... [vbcol=seagreen]
> Check the encryption section in this FAQ:
> http://www.sqlsecurity.com/DesktopDefault.aspx?tabid=22
> Some of the third party product sites have white papers as
> well.
> -Sue
> On Mon, 7 Mar 2005 10:10:21 -0800, "ME" <ME@.hotmail.com>
> wrote:
right[vbcol=seagreen]
do
>
sql

Encrypting column values

I want to store a function in SQL Server database that when called during insertion, encrypts a value and then stores encrypted text in the column.

Is there any built in Encrypting and Hashing mechanism in SQL 2005.

There is very 'rich' encryption capabilities in SQL 2005.

You may wish to start by referring to Books Online, Topic: Cryptographic Functions

encrypt data in database

Hi,

I have a .net application and i added a code that encrypts data saved in database. However, there is already data in the fields that was entered before this change.
I know need to check if the values in those fields are encrypted and if not i need to encrypt them.
How can I perform such a check and update the relevant data?
I use TrippleDES in .net to encrypt/decrypt the data.

Thanks

Have a look at this article:

http://aspnet.4guysfromrolla.com/articles/081705-1.aspx

Encrption Level

Does anyone know what encryption level (algorithm, API, strength, etc.) is used when SSAS 2005 encrypts data between a client and the server?

Thanks,
Dave Fackler1. For native connections (when you connect directly to AS2005, no http/IIS) SSPI is used for authentication, signatures and encryption and these 2 connection string properties can be used:

Protection Level =
NONE (no authentication, no signatures, no encryption)
CONNECT (authentication, clear text without signatures)
PKT INTEGRITY (authentication, clear text with signatures - for replay and data tempering protection)
PKT PRIVACY (authentication, encryption, signatures included)

SSPI = the name of the SSPI package to be used, for example 'Kerberos' or 'NTLM' (default is 'Negociate')

2. For http connections, you can use https

3. For local cubes connections, the problem won't apply

Adrian Dumitrascu.|||Do you know how can we change the protection level to NONE on a deployed OLAP project?

Encrption Level

Does anyone know what encryption level (algorithm, API, strength, etc.) is used when SSAS 2005 encrypts data between a client and the server?

Thanks,
Dave Fackler1. For native connections (when you connect directly to AS2005, no http/IIS) SSPI is used for authentication, signatures and encryption and these 2 connection string properties can be used:

Protection Level =
NONE (no authentication, no signatures, no encryption)
CONNECT (authentication, clear text without signatures)
PKT INTEGRITY (authentication, clear text with signatures - for replay and data tempering protection)
PKT PRIVACY (authentication, encryption, signatures included)

SSPI = the name of the SSPI package to be used, for example 'Kerberos' or 'NTLM' (default is 'Negociate')

2. For http connections, you can use https

3. For local cubes connections, the problem won't apply

Adrian Dumitrascu.|||Do you know how can we change the protection level to NONE on a deployed OLAP project?

Encrption Level

Does anyone know what encryption level (algorithm, API, strength, etc.) is used when SSAS 2005 encrypts data between a client and the server?

Thanks,
Dave Fackler1. For native connections (when you connect directly to AS2005, no http/IIS) SSPI is used for authentication, signatures and encryption and these 2 connection string properties can be used:

Protection Level =
NONE (no authentication, no signatures, no encryption)
CONNECT (authentication, clear text without signatures)
PKT INTEGRITY (authentication, clear text with signatures - for replay and data tempering protection)
PKT PRIVACY (authentication, encryption, signatures included)

SSPI = the name of the SSPI package to be used, for example 'Kerberos' or 'NTLM' (default is 'Negociate')

2. For http connections, you can use https

3. For local cubes connections, the problem won't apply

Adrian Dumitrascu.|||Do you know how can we change the protection level to NONE on a deployed OLAP project?