.NET Tutorials, Forums, Interview Questions And Answers
Welcome :Guest
Sign In
Win Surprise Gifts!!!

Top 5 Contributors of the Month
Gaurav Pal
Post New Web Links

Sql 2008 Encryption and changing the "sa" password

Posted By:      Posted Date: April 14, 2011    Points: 0   Category :

We have a sql 2008 server that uses the t-sql encryption "library" built into sql server. We created a cert and password to effect the data encryption.  Now we want to change the "sa" password on that server and are concerned that doing so could invalidate or impact our encrypted data. Is there any basis for that concern?





View Complete Post

More Related Resource Links

Preventing users from changing password

How to i keep users from changing password for a mssql account? We have a shared login which is readonly to the database.  But every now and then, someone decides to change the password.

Changing password character

Hi,  I have a textbox with single line mode, and i want to make it as password textbox not by making the textmode to password, but by programming, like calling a javascript function at onkeyup event and make the characters to a particular character, that should not show the characters i'm typing, any suggestions please.

Changing a current SQL 2008 Express Sharepoint instance to incl. Reporting services

I have a current instance of SQL 2008 Express that was created with a Sharepoint installation. Currently, that is the only purpose of the instance. We don't have management studio installed but from what we can tell by searching help screens is that instance is on SP 1 (10.1.2531.0) with Database Engine Services and SQL Server Replication. We need to now add Reporting Services. If we go to the Installation Tools to Add/Change the current instance, it asks for the SQL media which was from the original Sharepoint install. I have downloaded SQL 2008 Express with Advanced Tools but not SP 1. I've seen some threads where this wasn't a direct install. Ideally, I'd like to be able to change the current instance to add Reporting Services. When the wizard prompts for the media, will I be able to now point to the downloaed SQL Express w/ Adv. Tools even if it's not SP1? Thanks for your help. Tracy

Encryption and FIPS Compliance of Analysis Services 2008


We have SQL Server succesfully set up for FIPS Compliance, But require to setup the same Compliance for the Encryption of Data in Analysis services 2008 enterprise on the same Win 2008 server.

If we browse to the SAS Data Folder for our Project on the Fips Compliant  Instance We can view the Data Files and the Data is Visible in Plain Text. Depite the security setting being set to DataProtectMode 1 (Encryption).

So my Questions:

1. Is Analysis Services 2008 enterprise Fips Compliant ?

2. if it is How do we set it up

3. how do we prove to security Auditors that it is Set up and Working in Compliant Mode.

We have done Exaustive Searches of msdn Google blogs, sql-cat etc and found no relevent articles to Answer these specific Questions and are reluctant to Go to Chargeable support until we have exausted other available avenues.

changing your asp version in visual studio 2008


Dear All, 

How do you go about changing your asp.net version from asp 2.0 to asp 3.5 ? Thank you. 

Password Encryption with Custom Membership Provider


 I am using a custom membership provider with a custom ValidateUser method.  The ValidateUser sends and additional parameter to authenticate my users (Username, Password, and Dealer).  I created a custom stored procedure for ValidateUser to call.  I copied over all my users from another table and encrypted all the passwords in the aspnet_membership table using the code below.  My question is, how do I take the password the user enters in the login form and validate that against what is in my aspnet_membership table?  Is there a method I need to call to encode/decode to do the password check?  Thank you very much for your help!

Here is the code I used to encrypt the passwords (not even sure this was the right way to encrypt. Please tell me if I did this wrong):

public static string EncodePasswordNow(string originalPassword)

        Byte[] originalBytes;
        Byte[] encodedBytes;
        MD5 md5;        //Instantiate MD5CryptoServiceProvider, get bytes for original password and compute hash (encoded password)       

SSIS -2008 R2 - ODBC Connection error - Password does not save


Please know that I am new to SSIS 2008 and XML. Have a package I am trying to deploy. Am on a HV 64 Bit environment SQL Server 2K8 R2. Have an ODBC connection to our HBOC system as a data source. As always package runs in test environment and not in prod.  I need a bit of insight into the what and why's of the configuation file and how to change out the XML. 

Main issue is the password not saving and how to handle the ODBC side of things. I appreciate any help in this matter as I have searched with no real understanding of XML and best practices of creating the Congif file.


What encryption options are available for an entire database in SQL 2008 R2 Standard edition?

Our company is shifting to SQL 2008 R2 standard edition from SQL 2005 standard. We currently run LiteSpeed to do our backups, but are switching to SQL's backup feature. LiteSpeed encrypts our backups. Will we be able to do this in SQL 2008 R2 standard edition? I know that TDE encryption is only available in Enterprise Edition, but are there other encryption options for entire database backups for us?

sa's password in SQL Server 2008 R2 Express


In the SQL Server 2005 Express I can chose  the expert mode during the installation. This enables me to set the password  of the user “sa”.

Now I tried to install SQL Server 2008 R2 Express but I had no possibility to change / set the password of the user “sa”.

I read in the internet that the default-password of the user “sa” should be a blank password. Since in SQL Server 2008 R2 Express there was no way to set / change “sa”’s password I tried to login with a blank password. But this also didn’t worked.

So my questions are:

1.    Where during the SQL Server 2008 R2 Express setup can I set / change the “sa”’s password.
2.    Where in the SQL Server 2008 R2 Express can I set / change the “sa”’s password after the installation.
3.    What’s the default password of “sa” in SQL Server 2008 R2 Express?
4.    Why a blank password for the unmodified “sa” account didn’t worked? 

Thank in advance for all your helpful answers.

Changing the SQL Port of a Clustered SQL Server 2008 in Win Server 2008R2



The above setup is in vmware. The 2-node cluster works fine. Able to failover to and fro.  Just that when I tried to change the port 1433 to 12345, the cluster is not able to online the SQL Service. Below is the application error log:

[sqsrvres] checkODBCConnectError: sqlstate = 08001; native error = 274d; message = [Microsoft][SQL Server Native Client 10.0]A network-related or instance-specific error has occurred while establishing a connection to SQL Server. Server is not found or not accessible. Check if instance name is correct and if SQL Server is configured to allow remote connections. For more information see SQL Server Books Online.

The service status becomes Pending Online and after a while, it becomes offline. Using the SQL Configuration Manager, I revert to 1433 and it works fine again. May I know what am I missing ?





Error Changing Default Backup and Log locations on 2 Node SQL 2008 Failover Cluster


My setup is a SAN providing iSCSI targets for a 2 node SQL 2008 Failover cluster on Windows Server 2008.  With the SAN volumes created, MPIO and iSCSI targets defined on each node, I installed the SQL Server cluster with a single iSCSI target, and therefore assigned database files, log files and backup files to be on that single volume.

I have since added a separate volume for both log files and backup files.  All 3 volumes are online in the SQL Resource Group of the cluster and active on the SQL Server active node of the cluster, and all the volumes are accessible from Windows Explorer on both cluster nodes.

Through SQL Mgmt Studio, I changed the default location of the log files, and I changed the default backup location in the registry for each node.

When I try to create a new database, I get an error saying I do not have permission to access the log file volume.  When I try to restore a database, I get the same error when SQL Mgmt Studio tries to access and display the specified backup volume. The text of the error in each case is:

"Cannot access the specified path or file on the server.  Verify that you have the necessary security privileges and that the path or file exists.

If you know that the services account can access a specified file, type in the full path for the file in the File Name con

How to clone sql membership provider password encryption procedure


Hi there,

I am using sqlmembership provider for my VisualBasic web application security.

I don't want to use the default reset password control and behavior.

What I am trying to do is, after the user provides a correct answer to the security question, send him an email with a link similar to this:


Where ID is the user ID in the aspnetdb database

When the user visits the link I offer him two text boxes for the new password and its verification. Submit button validates both textboxes have the same text and if so, generates a random salt, concatenates the new password with the salt and hashes the concatenated string.

I replace in the membership table the salt and password values for the user id received in the query string.

I must be doing something wrong, because, after storing the new password and salt, the user cannot login and failed login attempts are reported.

My code for generating the salt string is

01. Private Function CreateSalt() As

Changing the Title of Report in SSRS 2008



I have deployed my reports in SSRS 2008. Everything is running fine now, but i am facing a little issue with all the reports. Whenever i access any report from the application, the report name on the top tab bar of the new opened window comes as 

"Report Viewer - Windows Internet Explorer provided by Softpedia"

which should actually be the name of the report which is getting generated like "rptCustomerDetails"

Can somebody tell me how can i make it appear as my report name?

I would be very grateful if someone can respond and help me with this..



Invalid or missing username or password. - Installing SQL 2008 on Server 2008


I'm new to SQL 2008 and while installing I receive the following error during as I'm installing. 

Invalid or missing username or password. To continue, provide valid credentials for the SQL Server Agent service.


I attened the SQL/Server/VS 2008 launch in LA and was given time bomb copies of SQL/Server 2008. 

On a new machine I installed Server 2008.  (It't a stand alone machine, no AD.)

After Server 2008 installation was completed I tried to install SQL 2008.

I'm hung on the install on the user name/password page.


I'm assuming the account I specify does not have to be created, SQL will do it, or is that my problem?


Can you offer any assistance?



Enabling Encryption on SQL 2008 R2 Cluster

Hi All,
I have a SQL Server 2008 R2 (10.50.1600) cluster running on Windows Server 2008 R2.  It is a three-node cluster and there are four instances.  We are pre-production and the customer has tasked me with setting up client/server encryption for three of the four instances.  

I have researched lots of different KB articles and blogs (see below), but I'm still having trouble installing the cert.  I know the basic approach is to:
1. Get a cert that matches the FQDN of each clustered SQL instance (e.g. Instance01.domain.local), using a cert that has "Server Authentication" capability.
1a. Certificate has to be requested and installed by the SQL Server service account (e.g. Domain\svcSQL).
2. In the SQL Configuration Manager, go to "SQL Server Network Configuration", right click on "Protocols for Instance01", and click on Properties.  Then click on the Certificates tab, and select the cert I just generated.  
3. Repeat this for all nodes in the cluster, for each instance I am adding a cert to.

But it's been a struggle, and though I finally was able to request and receive a cert, it does not show up for selection in the Protocols dialog.  What have I done wrong?


Re-login to SQL Server 2008 in Windows authentication mode after resetting my Windows login password



I recently reset my Windows login password but from then onwards SQL Server 2008 is not allowing me to login in Windows authentication mode.

Can someone please help on where I can go and set my new Windows Login password in SQL Server 2008 and continue to login in Windows authentication mode?

Thank you,

Anish Ravindran

SQL Server 2008 R2 Installation "Server Browser" Won't Allow Password Change


I'm trying to install SQL Server 2008 R2 (the one from dreamspark) on my computer for local testing on a database app I'm working on.  For some reason when it gets to the form that handles service accounts and server collation configuration,  SQL Full-text Filter Daemon Launcher greys out the Startup Type box, and SQL Server Browser greys out the account and password boxes.  I can't figure out how to change these in any way to make the darn program install.  The help file told me to uninstall any existing SQL Server items on the computer, and to the best of my knowledge the only ones left were installed with Visual Studio 2010.

I'm using it so that I can ultimately convert a bunch of .DBF files to SQL Server files that I can import into a Windows Form App.  It's not going to be used for any kind of networking or connectivity for some time, I just need it to fuse a bunch of dbf's into a coherent VS compatible file (I've read I have to run them through Access or Excel first, which I can an will do).

Can anyone explain what's going on with this or offer a better help link than the program?  I'm completely confused by their entire set up and installation methods.

May the fleas of a thousand camels feast happily on the lower regions of your enemies. And may their arms be too short to scratch!
ASP.NetWindows Application  .NET Framework  C#  VB.Net  ADO.Net  
Sql Server  SharePoint  Silverlight  Others  All   

Hall of Fame    Twitter   Terms of Service    Privacy Policy    Contact Us    Archives   Tell A Friend