How Using the Windows 2000 Encrypted File System to Secure SQL Server Databases and Backups Affects SQL Server's Performance

Chris is the author of the book, SQL Server for the Oracle DBA

Those running Windows 2000 can take advantage of the EFS (encrypted file system) for encrypting SQL Server database and/or backup files. In some organizations, encrypting data is mandatory, and as you might expect, it can exact a performance penalty. In this article, I will take a brief look at how you set up encryption for SQL Server and Windows 2000, and then run some tests to see how it affects SQL Server’s performance.

How to Turn on Encryption for SQL Server Databases and Backups

To turn on the encrypted file system in Windows 2000 for use by SQL Server:

  • Shutdown your database instance.
  • Login with the service account the SQL Server instance is using.
  • Select the properties of the folder(s) in which the database files reside using Windows Explorer.
  • Select the advanced option button and follow the prompts to encrypt the files/folders.
  • Re-start the SQL Server service.
  • Verify the successful start-up of the instance and databases affected via the encryption (or create databases after the fact over the encrypted directories).
  • Verify encryption of the database files via cipher.exe.

If you attempt to start the service as any user other than the user that encrypted the database data files, the instance will not start and/or your database will be set to suspect.

Here is an example of SQL Server error log entry showing what happens if you start the service with an account other than the one used to encrypt the files:

udopen: Operating system error 5(error not found) during the creation/opening of physical device E:cktempefsefs_Data.MDF.

FCB::Open failed: Could not open device E:cktempefsefs_Data.MDF for virtual device number (VDN) 1.

udopen: Operating system error 5(error not found) during the creation/opening of physical device E:cktempefsefs_Log.LDF.

FCB::Open failed: Could not open device E:cktempefsefs_Log.LDF for virtual device number (VDN) 2.

As you might expect, encrypting your SQL Server data negatively affects SQL Server’s performance. How much it will affect speed is a tough to measure as there are so many factors to consider. For example:

  • Hardware vendor chosen
  • I/O drives and OS version and patch level
  • Disk vendor, speed, cache
  • RAID levels, channels, disk interconnect
  • RAID controller type, cache, vendor
  • Software-based caching models and/or BIOS patches
  • OS configuration parameters, service packs and registry “tweaks”

and perhaps more, can all affect SQL Server’s encrypted performance.

Testing How Windows 2000 Encryption Affects SQL Server’s Performance

The testing of EFS performance using SQL Server database files was done on the following hardware:

HP NetServer, Dual PIII 850Mhz, 512Mb RAM, SCSI 160 RAID-1 18Gb Disks

The tests were repeated five times, with the average figures shown below. No other user or application was running during the tests. The databases were identical in terms of their size, recovery model, collation and other basic settings.

Before beginning the tests, I tested to be sure that encryption was working. This can be done by typing the following at the command line:

cipher

The results of this command were:

Listing d:
New files added to this directory will be encrypted.

E EFSTEST_Data.MDF
E EFSTEST_Log.LDF

The results above indicate that encryption is on and that there are two existing files that are encrypted.

Next, from within Query Analyzer, I set I/O time and statistics to on, as follows:

set statistics io on
set statistics time on

And before each test, I ran the following code in order to clear out the memory buffer and to force a checkpoint.

dbcc dropcleanbuffers
checkpoint

Continues…

0 Replies to “How Using the Windows 2000 Encrypted File System to Secure SQL Server Databases and Backups Affects SQL Server's Performance

  1. !!!Azdmnzbzxd says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    1371987827118881569705913459999
    https://www.successdigestforum.com/viewtopic.php?f=6&t=1859738 https://guillaumekasbarian.fr/community/topic/idakzrlz/#postid-609828 http://va2na.com/forum/viewtopic.php?f=2&t=185578 https://kusbaz.ru/viewtopic.php?f=45&t=223940 http://chs.my/forum/viewtopic.php?f=4&t=606070 http://metr.by/object/2087829 https://q8mazad.com/vb/showthread.php?p=3285501&posted=1#post3285501 https://www.sql-server-performance.com/w2k-filesystem-affects-performance/?unapproved=192009&moderation-hash=ece31da343b479cd5906e1f126f14142#comment-192009 http://porthkerris.com/forum/viewtopic.php?f=7&t=689542 http://post.12gates.net/showthread.php?tid=348824&pid=693823#pid693823 http://conternative.com/showthread.php?tid=30649 http://xn--80ajgfwchmneec5bzj.xn--p1ai/index.php/classifieds/automotive/ad/dhafx,154158 http://naturalbodybuilding.ru/ru/node/13885#comment-360579 https://homment.com/gNJtynveD0UNljttpQhC http://forum.naronanews.com/showthread.php?tid=163759
    http://forum.dahouse.ir/thread-5357.html https://forum.latimojong.com/viewtopic.php?f=10&t=34753 http://www.unraveled.net/phpbb/viewtopic.php?f=6&t=2262329 https://domtur.com/forums/viewtopic.php?f=3&t=1786 http://nauc.info/forums/viewtopic.php?f=3&t=15759998 http://forum.wrotaroztocza.pl/viewtopic.php?f=2&t=525193&sid=6a882cd62733eb04ccd8074b87541eff http://forum.wrotaroztocza.pl/viewtopic.php?f=2&t=529185&sid=50af8e7fdec26bd44d28a1ab7e6d3a9e http://protee.guru/viewtopic.php?f=8&t=2531986 http://labor-economics.org/forum/viewtopic.php?f=5&t=1705707 https://watchmoviesonlinenow.org/index.php/topic,25652.new.html#new http://whsicilia.altervista.org/viewtopic.php?f=2&t=24317 https://congnghetuonglai.vn/forum/viewtopic.php?f=38&t=240015 http://nauc.info/forums/viewtopic.php?f=3&t=15759456 http://www.driverconnection.net/forums/viewtopic.php?pid=268578#p268578 http://riicorecruitment.org/index.php/topic,6112.new.html#new http://madisonsongwriterscircle.com/viewtopic.php?f=5&t=78624 http://forum.wrotaroztocza.pl/viewtopic.php?f=2&t=528853&sid=edb288c8404c902fb2729469db743318 http://cyberweb.pt/viewtopic.php?f=3&t=66615 http://trudixcrs.com/viewtopic.php?f=5&t=13151 http://nauc.info/forums/viewtopic.php?f=3&t=15746984 http://philippe.payro.free.fr/forum/viewtopic.php?f=2&t=143760 http://trudixcrs.com/viewtopic.php?f=5&t=12898 http://users.atw.hu/videocsacska/viewtopic.php?p=260124#260124 http://madisonsongwriterscircle.com/viewtopic.php?f=5&t=78929 http://forum.wrotaroztocza.pl/viewtopic.php?f=2&t=532968&sid=990d23583e48228289f0969d7f1fe085
    http://naturalbodybuilding.ru/ru/node/26352#comment-367618 http://ytubetalk.com/viewtopic.php?f=14&t=33748 https://www.successdigestforum.com/viewtopic.php?f=6&t=1861831 http://naturalbodybuilding.ru/ru/node/13885#comment-360756 http://science.ftu.ac.th/?p=1006&unapproved=130376&moderation-hash=4488d1c83d25da6cad61828efcba23f3#comment-130376 http://cvt-portal.ru/showthread.php?tid=39805&pid=134334#pid134334 http://forum.12sky2.online/index.php?/topic/519-stayhome-now/page/2660/#comment-1159210 http://www.chopchopmoocs.com/topic-5-observation-analogy/?unapproved=78197&moderation-hash=5c5f37c0f979e4d0b52dd9f7282458ba#comment-78197 https://valgemetsa.eu/gallery/pildid/?unapproved=15530&moderation-hash=72ca87260ef9728f5982f4a310992684#comment-15530 http://www.saltyfig.com/2016/05/quiche-with-goat-cheese-and-asparagus/?unapproved=57837&moderation-hash=a99e2d9b71f3757b6c023583113453a3#comment-57837 http://metr.by/object/2078585 http://weebbun.com/showthread.php?tid=213884 http://treasurehuntspokane.com/excellent-travel-advice-and-guide-to-visit-indonesia/#comment-2065568 http://metr.by/object/2077361 http://realrawtruths.com/2016/03/hot-topic_-the-power-of-the-human-spirit/?unapproved=262640&moderation-hash=11f1a3cca6ac5caea1cc0695033601a7#comment-262640
    https://www.fxforecasting.com/viewtopic.php?f=5&t=20908 http://kriptoturkiye.org/viewtopic.php?f=34&t=15583 https://freeride24.ucoz.ru/forum/8-245-4#4646 http://school36-tambov.ru/forum/viewtopic.php?f=17&t=469406 https://forum.cctvtechforum.com/Thread-%D0%97%D0%BE%D0%B2-%D0%BF%D1%80%D0%B5%D0%B4%D0%BA%D0%BE%D0%B2-%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD-%E3%8A%84-%D0%97%D0%BE%D0%B2-%D0%BF%D1%80%D0%B5%D0%B4%D0%BA%D0%BE%D0%B2-%D0%BC%D1%83%D0%BB%D1%8C%D1%82%D0%B8%D0%BA-2021-%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD-%D0%BF%D0%BE%D0%BB%D0%BD%D0%BE%D1%81%D1%82%D1%8C%D1%8E https://www.rustlandgermany.de/viewtopic.php?f=7&t=40968 http://nauc.info/forums/viewtopic.php?f=3&t=15772706 https://share1s.net/viewtopic.php?f=21&t=1370915 http://xn--l1adgmc.xn--80aaeowim.xn--p1ai/viewtopic.php?f=50&t=10633&p=238624#p238624 http://kicme.kz/index.php?option=com_kunena&view=topic&catid=4&id=132608&Itemid=194#132890 http://lasertrace.nl/forum/viewtopic.php?f=6&t=1177579 http://bbs.hpc-hp.com/viewtopic.php?f=9&t=37614 http://www.nasdaqotc.com/viewtopic.php?t=537617 http://www.lovebird.it/index.php/forum/uccelli/130506-2-2-2021-hd#673335 http://zatoxgaming.org/forums/viewtopic.php?f=5&t=731280 http://www.driverconnection.net/forums/viewtopic.php?pid=268478#p268478 http://lindner-essen.de/forum/viewtopic.php?f=3&t=2445777 http://nauc.info/forums/viewtopic.php?f=3&t=15747962 http://www.mbwguitars.com/forum/viewtopic.php?f=5&t=22102 http://169.59.9.108/index.php/topic,53833.new.html#new http://forum-women.ru/viewtopic.php?f=7&t=4887 http://forum.wrotaroztocza.pl/viewtopic.php?f=2&t=525640&sid=b82db16ff6395ab64010a9d181bbf081 http://nauc.info/forums/viewtopic.php?f=3&t=15755485 http://zatoxgaming.org/forums/viewtopic.php?f=5&t=731028 http://forumseramik.com/viewtopic.php?f=10&t=12428

Leave a Reply

Your email address will not be published. Required fields are marked *