SSIS Encryption data tap

Question

Dear, Via SSIS we need to load sensitive data into the SQL database. In this SQL DB we can use always encrypted as even DBA's may not see the data. However the next weakest link is a data tap in SSIS; is there a way to shield off everything so that from end-to-end the sensitive data is protected, also from DBA's? Thanks in advance, Bram

Answer 1

Hi @Bram Decraene ,

We can set the Protection Level as Encrypt all with password in SSIS packages.

Encryption, as used by package protection levels, is performed by using the Microsoft Data Protection API (DPAPI), which is part of the Cryptography API (CryptoAPI).
The package protection levels that encrypt packages by using passwords require that you provide a password also. If you change the protection level from a level that does not use a password to one that does, you will be prompted for a password.

Please refer to Access Control for Sensitive Data in Packages.

Best regards,
Mona

----------

If the answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.