Database level encryption in CRM on-premise

(0) Share

Report

Posted on by Community Member

Hi all,

Does anyone have any idea how to encrypt fields like customer's birthday, IC number and phone number at DB level in CRM on-prem, with minimal effort? We are using MS SQL 2012 Standard Edition so TDE is out of the picture.

Thanks in advance.

*This post is locked for comments

I have the same question (0)

All responses (5)

Answers (0)

Suggested answer

Hosk on at

Like (0)

Report

are you using CRM 2013? Because CRM 2013 has database encyption you can turn on

community.dynamics.com/.../data-encryption-in-crm-2013.aspx

msdynamicscrmblog.wordpress.com/.../data-encryption-in-dynamics-crm-2013

I think database has to be HTTPS for DB encyption

if you add field level security can stop the fields displaying to everyone and stop it being audited. Maybe this is what you want

crmbusiness.wordpress.com/.../crm-2013-how-to-set-up-field-level-security

Was this reply helpful? Yes No
Community Member on at

Like (1)

Report

@Ben

Database encryption in CRM 2013 is only used for specific system fields. As far as I know all of these are on Mailbox records, because they may store user credentials for server-side synch configuration, so these fields are encrypted (on by default in a new installation).

Field Security does not stop auditing from working, but it is honoured when viewing audit data, so the old values are recorded but not displayed in audit history to someone that does not have access to read the field.

Was this reply helpful? Yes No
Hosk on at

Like (0)

Report

Thanks for your reply Adam. I assumed (wrongly) that because you couldn't see the audit values in the audit it wasn't auditing them. interesting.

Was this reply helpful? Yes No
Vijay T 15 on at

Like (0)

Report

Hi All,

We need to maintain backup databases for CRM. And some fields' data in that databases are critical, So, even if leaked that data should not be readable.

Can you help me with this requirement?

Thanks,

Was this reply helpful? Yes No
Damon Kirk 50 on at

Like (0)

Report

Hi ChernYee,

It's six years later and I'm wondering if you ever found a solution. We, too, want to encrypt at least certain fields in our on-prem D365 database, but it is running on SQL Server Standard Edition, so TDE is not an option for us.

Any ideas?

Was this reply helpful? Yes No