-- 切換到主數(shù)據(jù)庫
USE master;
GO

-- 創(chuàng)建主密鑰
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'StrongPassword!123';
GO

-- 創(chuàng)建證書
CREATE CERTIFICATE TDECertificate WITH SUBJECT = 'TDE Certificate';
GO

-- 切換到需要加密的數(shù)據(jù)庫
USE MyDatabase;
GO

-- 創(chuàng)建數(shù)據(jù)庫加密密鑰（DEK）
CREATE DATABASE ENCRYPTION KEY
WITH ALGORITHM = AES_256
ENCRYPTION BY SERVER CERTIFICATE TDECertificate;
GO

-- 啟用數(shù)據(jù)庫加密
ALTER DATABASE MyDatabase
SET ENCRYPTION ON;
GO

-- 查詢數(shù)據(jù)庫加密狀態(tài)
SELECT
    name,
    is_encrypted
FROM
    sys.databases
WHERE
    name = 'MyDatabase';
GO

-- 切換到主數(shù)據(jù)庫
USE master;
GO

-- 創(chuàng)建主密鑰
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'StrongPassword!123';
GO

-- 創(chuàng)建證書
CREATE CERTIFICATE TDECertificate WITH SUBJECT = 'TDE Certificate';
GO

-- 切換到需要加密的數(shù)據(jù)庫
USE MyDatabase;
GO

-- 創(chuàng)建數(shù)據(jù)庫加密密鑰（DEK）
CREATE DATABASE ENCRYPTION KEY
WITH ALGORITHM = AES_256
ENCRYPTION BY SERVER CERTIFICATE TDECertificate;
GO

-- 啟用數(shù)據(jù)庫加密
ALTER DATABASE MyDatabase
SET ENCRYPTION ON;
GO

-- 查詢數(shù)據(jù)庫加密狀態(tài)
SELECT
    name,
    is_encrypted
FROM
    sys.databases
WHERE
    name = 'MyDatabase';
GO

ALTER SYSTEM SET ENCRYPTION WALLET LOCATION = 
'file_path_to_wallet' SCOPE = BOTH;

ADMINISTER KEY MANAGEMENT CREATE KEYSTORE 'file_path_to_wallet' IDENTIFIED BY "wallet_password";
ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY "wallet_password";

ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY "wallet_password" WITH BACKUP;

ALTER TABLESPACE users ENCRYPTION ONLINE USING 'AES256' ENCRYPT;

SET GLOBAL innodb_file_per_table = 1;

CREATE TABLESPACE encrypted_ts ADD DATAFILE 'encrypted_ts.ibd' ENCRYPTION='Y';

CREATE TABLE mytable (id INT, data VARCHAR(100)) TABLESPACE = encrypted_ts;