TDE Status Report

The TDE (Transparent Data Encryption) Status Report in Database Health Monitor provides a comprehensive overview of the encryption status for all databases on a specified SQL Server instance. Here’s a breakdown of the report shown in the screenshot:

TDE

Columns in the TDE Report:

  • Row: A sequential number for each database entry.
  • Database Name: Lists the names of the databases (e.g., AdventureWorks_dbs1000, DBHealthHistoryDW2022).
  • Encryption State: Indicates the encryption status:
    • Unknown: The encryption state is not determined.
    • Encrypted: The database is encrypted (e.g., TDE_TESTING and tempdb).
  • Key Algorithm: Specifies the encryption algorithm used, if applicable (e.g., AES for encrypted databases).
  • Key Length: Shows the encryption key length in bits (e.g., 256 for encrypted databases).
  • Certificate Name: Displays the name of the certificate used for encryption (e.g., TDE_Cert for TDE_TESTING and tempdb).
  • Subject: Provides the subject of the certificate (e.g., TDE Certificate for TDE_TESTING).
  • Percent Complete: Indicates the progress of the encryption process (e.g., 3 for TDE_TESTING and tempdb, meaning encryption is 3% complete).

This report is part of Database Health Monitor, a tool by Steve Stedman, designed to provide insights into SQL Server health and security, including TDE status for unlimited instances under its licensing model.

Here is a short video showing the TDE Status report.