Installation

This section explains how to install and set up KeyControl and the VM for Microsoft SQL TDE.

Recommendations for installation

Entrust recommends you install the following:

Microsoft SQL Server

Important: Only virtual machines are supported.

If you are using an SQL Server cluster, these installation steps should be repeated for each node in the cluster.

Note: The SQL Server cluster scenario has not been tested with KeyControl.

Ensure you apply all the latest service packs, updates and hotfixes for Microsoft SQL Server software.
SQL Server credentials and appropriate permissions are required for all users to install and configure SQL EKM.
Install Microsoft SQL Server Management Studio
Install Microsoft SQLCmd Utility

Install and register the Entrust Policy Agent

You need to:

Install the Policy Agent on the SQL Server VM
Create a VM Set in KeyControl
Register the SQL Server VM on the KeyControl VM Set

To install and register the Policy Agent on the SQL Server:

Download the Policy agent. Select WORKLOADS → Actions.
Install the Policy Agent on SQL Server VM.
Create a VM SET on the KeyControl WORKLOADS tab.
Register the SQL Server VM with KeyControl.

For more information regarding installing the Policy Agent, see Windows Policy Agent Installation .

Enable TDE on SQL Server

You need to enable TDE on the SQL Server VM, so the VM can be used for TDE.

To enable TDE, run the following command on the command-prompt/power-shell of SQL Server VM.
Copy
```
hcl tde enable
```