Thanks Jeff and Sean. The fix Sean steered me to to (using XML PATH and STUFF in a corelated query) worked! Now I just need to pull it all apart...

I have been reading the article and am trying to apply that fix now. I thought the additional data I sent would have helped. I may be able to simplify...

Hello Sean. Apologies, I will try to clarify.

I have a pencils table that describes the pencils.

pkPencilId || PencilDescription || LENGTH

1 || Yellow, w/o erase || 5”

2 || Yellow, w/eraser || 5”

3 || Green, w/o eraser || 6”

Then there is a PencilLot table.

pkLotId || flPencilId ...

Sorry Ajay, but I don't see any link to the article. Am I just missing it?

Kurt.

That is exactly the answer I got from my contract specialist! He said "Noting is secure - we just need to keep making it harder for them to get anything."

And...

Thanks e4d4:

What confuses me is - how likely is it that someone can get all the way into the server to create or steal a backup and NOT have access...

Success!

Thanks to you both for your input. Giving the database role CONTROL permission on the cert, and REFERENCE permission on the key, worked perfectly. We are good to go.

But I'd...

e4d4:

That is exactly what I have read as well. I have built a basic proof of concept form and it works for me, but I'm DBO. Today I test with...

Thanks e4d4 and Perry:

It seems that was the missing ingredient: I HAD been encrypting the cert via password. When I leave off the password I then can access the cert...

UGH! Enbarrased to admit that we are actually running SS2k5, NOT 2k8! i pulled the wrong version number. Management Studio tools are 2008, however. I hope posting this in this...

Our DBA has assigned my user account ALL permissions on the certificate, and reference permission on the symmetric key, but when I run this code:

USE AdventureWorks;

OPEN SYMMETRIC KEY TestSymmetricKey

...

Thanks for the reply, e4d4:

Some further questions, if I may; if I understand correctly, to allow SQL server's Key management to work, the user would need CONTROL permission on the...

Okay, I DID manage to move ahead a bit, and in the process answered at least some of my questions. For starters, the certificate and symmetric keys are indeed automatically...

Gail:

I am currently doing a 'gratitude project' on facebook. Just thought you should know YOU are today's gratitude!

"Today's gratitude: database consultant Gail Shaw of Johannesburg, South Africa, for her wonderful...

!!!!!!!!!!!!!!! AARRRGGHHHHHHHHHHHH !!!!!!!!!!!!!!

Gila Monster, Gail, SPOT ON!

THAT was the issue. Oh god, I feel stupid. I have been staring at this code for HOURS and never caught that. THANK YOU,...