Ideas for Encrypted Databases and backups

[potatoqualitee]

New Check

What would you like to check?

For instances using TDE, have newer databases been encrypted yet

What should be configurable for the results of the check ?

the databases and a time threshold (if its older than 24 hours, then fail)

What should be able to be excluded from being tested ?

<-- Could be databases, Could be Availability Groups etc -->
<-- This would not be instances -->

Additional information

Also, perhaps, checking to ensure backups are encrypted using Test-DbaBackupEncrypted if you expect your whole history to be encrypted