SQL 2005

Asymmetric Encryption

獨孤雲 — Sun, 07 Jan 2007 09:46:00 GMT

--測試非對稱鑰匙對所有的加/解密,簽章與驗證
use tempdb
go

--建立非對稱鑰匙對

create asymmetric key keyRSA
with Algorithm=RSA_2048
encryption by password=N'password';

--建立存放加密與簽章資料的資料表
create table tblTest(c1 int identity(1,1) primary key , Org nvarchar(100),
Encrypt Varbinary(max),Signature varbinary(max))
go

--將資料透過鑰匙對加密與簽章後放入資料表
declare @str nvarchar(100)
set @str = N'Hello RSA 2048'
insert into tblTest values(@str,
EncryptByAsymKey(AsymKey_ID('keyRSA'),@str),
SignByAsymKey(AsymKey_Id('keyRSA'),@str,N'password')
)
go

select * from tblTest

--解密，並驗證簽章
select org,convert(nvarchar(100),
DecryptByAsymKey(AsymKey_Id('keyRSA'),CAST(Encrypt as Nvarchar(MAX)),
N'password')) as Decrypt,
CASE when VerifySignedByAsymKey(AsymKey_Id('keyRSA'),Org,Signature)=1
then
N'資料正確'
else
N'資料被改過'
end
as IsSignatureValid
from tblTest

--故意修改原始資料
update tblTest set Org=Org+'a'

--再驗證一次

select org,convert(nvarchar(100),
DecryptByAsymKey(AsymKey_Id('keyRSA'),CAST(Encrypt as Nvarchar(MAX)),
N'password')) as Decrypt,
CASE when VerifySignedByAsymKey(AsymKey_Id('keyRSA'),Org,Signature)=1
then
N'資料正確'
else
N'資料被改過'
end
as IsSignatureValid
from tblTest

--清除
drop table tblTest
drop asymmetric key keyRSA

Symmetric Encryption

獨孤雲 — Sun, 07 Jan 2007 09:44:00 GMT

use AdventureWorks
go

drop table tab1

create MASTER KEY
encryption by password='some56*z'
go

create certificate foo with subject='foo'
go

dump certificate foo to file ='c:\foo.cer'
go

create SYMMETRIC KEY fookey with ALGORITHM =DES
encryption by certificate foo
go

-- 設定為 varbinary欄位
create table tab1(id int,cardno varbinary(100))
go

-- 開啟對稱式 key
OPEN SYMMETRIC KEY fookey DECRYPTION BY CERTIFICATE foo;
go

insert tab1(id,cardno) values(1,encryptByKey(Key_GUID('fookey'),'12345678'))

-- 取得加密值
select * from tab1

-- 取得解密值
select convert(char(8), decryptbykey(cardno)) from tab1

-- 關掉對稱式 key之後,得到 null值
close symmetric key fookey
select convert(char(8), decryptbykey(cardno)) from tab1

-- drop everything
drop table tab1
drop symmetric key fookey
drop certificate foo
drop master key

Restore database example

獨孤雲 — Sun, 31 Dec 2006 16:57:00 GMT

USE [master]
GO

--
CREATE DATABASE [AWData] ON
( FILENAME = N'C:\myAdmin\DB\AWData_P.mdf' ),
( FILENAME = N'C:\myAdmin\DB\AWData_log.ldf' ),
( FILENAME = N'C:\myAdmin\DB\AWData_A.ndf' ),
( FILENAME = N'C:\myAdmin\DB\AWData_B.ndf' ),
( FILENAME = N'C:\myAdmin\DB\AWData_C.ndf' )
FOR ATTACH

-- 各資料表所屬的 Filegroup
SELECT objs.schemaN N'結構描述', objs.tableN N'資料表', das.name N'檔案群組'
FROM AWData.sys.data_spaces das INNER JOIN
(
  SELECT DISTINCT object_id,data_space_id
  FROM AWData.sys.indexes
  WHERE type BETWEEN 0 AND 1
) idx
ON das.data_space_id = idx.data_space_id
INNER JOIN
(
  SELECT sys.objects.name 'tableN', object_id, sys.schemas.name 'schemaN'
  FROM AWData.sys.objects INNER JOIN AWData.sys.schemas
  ON sys.objects.schema_id = sys.schemas.schema_id
  WHERE type='U'
) objs
ON objs.object_id = idx.object_id
ORDER BY 3

-- 分析各個資料檔案的屬性
SELECT name, physical_name, state_desc, is_read_only , read_only_lsn
FROM AWData.sys.database_files

-- 分析資料
SELECT * FROM AWData.dbo.tbl_P
UNION ALL
SELECT * FROM AWData.dbo.tbl_A
UNION ALL
SELECT * FROM AWData.dbo.tbl_B
UNION ALL
SELECT * FROM AWData.dbo.tbl_C

-- INSERT DATA
INSERT AWData.dbo.tbl_P VALUES(2,'P')
INSERT AWData.dbo.tbl_A VALUES(2,'A')
INSERT AWData.dbo.tbl_B VALUES(2,'B')
INSERT AWData.dbo.tbl_C VALUES(2,'C')

-- 使用 SQLCMD 模式
!!net stop mssqlserver /Y

-- 破壞 C:\myAdmin\DB\AWData_B.ndf

!!ren "C:\myAdmin\DB\AWData_B.ndf" *.BAD

!!net start mssqlserver /Y

-- 檢查 SQL Server 記錄檔
/*
訊息
錯誤: 17207，嚴重性: 16，狀態: 1。
FileMgr::StartSecondaryDataFiles: Operating system error 2(系統找不到指定的檔案。) occurred while creating or opening file 'C:\myAdmin\DB\AWData_B.ndf'. Diagnose and correct the operating system error, and retry the operation.

訊息
錯誤: 5120，嚴重性: 16，狀態: 5。
無法開啟實體檔案 "C:\myAdmin\DB\AWData_B.ndf"。作業系統錯誤 2: "2(系統找不到指定的檔案。)"。

-- 分析資料，Error
SELECT * FROM AWData.dbo.tbl_P

-- 檢查資料庫的狀態 -- RECOVERY_PENDING
SELECT name, state_desc
FROM sys.databases

-- OFFLINE
ALTER DATABASE AWData
MODIFY FILE
(name = N'AWData_B', OFFLINE)
go

-- Database are Online
ALTER DATABASE AWData
SET ONLINE
go

-- 分析各個資料檔案的屬性 -- OFFLINE
SELECT name, physical_name, state_desc, is_read_only , read_only_lsn
FROM AWData.sys.database_files

-- 分析資料
SELECT * FROM AWData.dbo.tbl_P
SELECT * FROM AWData.dbo.tbl_A
SELECT * FROM AWData.dbo.tbl_B -- ERROR
SELECT * FROM AWData.dbo.tbl_C

/*
訊息 8653，層級 16，狀態 1，行 1
查詢處理器無法產生資料表或檢視 'tbl_B' 的計劃，因為資料表存在於非線上的檔案群組中。
*/

-- Backup LOG --> tail-log backup
/*
記得先將 M0337_PiecemealBackup.bak，存放到 C:\myAdmin\Backup 中。
*/

BACKUP LOG AWData
TO DISK ='C:\myAdmin\Backup\M0337_PiecemealBackup.bak'
WITH NAME = 'LOG_backupset',
NO_TRUNCATE

--
RESTORE HEADERONLY
FROM DISK ='C:\myAdmin\Backup\M0337_PiecemealBackup.bak'

--
RESTORE FILELISTONLY
FROM DISK ='C:\myAdmin\Backup\M0337_PiecemealBackup.bak'
WITH FILE=1

-- RESTORE DATABASE -- File
RESTORE DATABASE AWData
FILE = N'AWData_B'
FROM DISK ='C:\myAdmin\Backup\M0337_PiecemealBackup.bak'
WITH RECOVERY

/*
已處理資料庫 'AWData' 的 16 頁，檔案 1 上的檔案 'AWData_B'。
向前復原目前的起始點位於記錄序號 (LSN) 21000000030800001。
必須有超過 LSN 21000000035600001 的其他向前復原，才能完成還原順序。
RESTORE DATABASE ... FILE=<name> 已於 0.057 秒內成功處理了 16 頁 (2.299 MB/sec)。
*/

-- 分析各個資料檔案的屬性 -- RESTORING
SELECT name, physical_name, state_desc, is_read_only , read_only_lsn
FROM AWData.sys.database_files

--
RESTORE LOG AWData
FROM DISK ='C:\myAdmin\Backup\M0337_PiecemealBackup.bak'
WITH FILE = 2,
RECOVERY

-- 分析各個資料檔案的屬性 -- ONLINE
SELECT name, physical_name, state_desc, is_read_only , read_only_lsn
FROM AWData.sys.database_files

-- 分析資料
SELECT * FROM AWData.dbo.tbl_P
UNION ALL
SELECT * FROM AWData.dbo.tbl_A
UNION ALL
SELECT * FROM AWData.dbo.tbl_B
UNION ALL
SELECT * FROM AWData.dbo.tbl_C

Configuration commands

獨孤雲 — Sun, 31 Dec 2006 13:29:00 GMT

sp_configuration (server configuration)

sp_dboption (database configuration)

set xxx on / off (connection configuration)

Rename database name

獨孤雲 — Sun, 31 Dec 2006 11:57:00 GMT

1. sp_dropserver @@servername

2. sp_addserver 'vs99',local

3. shutdiwb with nowait

4. net start SQL server service

Integrity & Constraint Type

獨孤雲 — Sun, 24 Dec 2006 15:36:00 GMT

1. Domain Integrity

(1). Default Constraint

(2). Check Constraint

(3). Foreign Key Constraint

(4). Null Constraint

2. Entity Integrity

(1). Primary Key Constraint

(2). Unique Constraint

3. Referential Integrity :

(1). Foreign Key Constraint

(2). Check Constraint

Secondary XML Index

獨孤雲 — Sun, 24 Dec 2006 14:49:00 GMT

* Secondary XML Index is created based on Primary XML Index

* Secondary XML Index Type:

(1). PATH

(2). PROPERTY

(3). VALUE

Create XML Index

獨孤雲 — Sun, 24 Dec 2006 14:44:00 GMT

1. 建立 XML Index 的 Table 上要有定義 Clustered Primary Key

2. 每個 Table 第一個建立的 XML Index 必須維 Primary XML Inddex

3. SET ARITHABORT ON

Defragmentation

獨孤雲 — Sun, 24 Dec 2006 14:36:00 GMT

1. <= 30% fragmentation -> Reorganize

2. > 30% fragmentation -> Rebuild

Options to create indexes on computed columns

獨孤雲 — Sun, 24 Dec 2006 13:30:00 GMT

Set to "ON":

1. ANSI_NULLS

2. ANSI_PADDING

3. ANSI_WARNINGS

4. CONCAT_NULL_YIELDS_NULL

5. QUOTED_IDENTIFIER

6. ARITHABORT

Set to "OFF":

1. NUMERIC_ROUNDABORT