SQL Server Certificates

[shannonlapekas]

I have a SQL Database that is storing credit card information. The purpose of having it store credit card information is for recurring billing. It is not currently connected to an e-commerce website. Would it be a good idea for use to set up our SQL Server that is storing this data with a certificate? I intend to add the functionality of having it connected to a web server in the next 6 months. If it is not wise to add a certificate now would it be a good idea after it is connected to a website?

 

[jgoodman00]

If you intend transmitting the numbers across the web then you will need to get a certificate in order to setup SSL.

If you are simply planning on storing these numbers on the computer, & it will become a web-server in the future, then you are probably better off not doing this. It might only present a minimal security risk, but if it isnt necessary, dont take it.

James Goodman MCSE, MCDBA

http://www.angelfire.com/sports/f1pictures