SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have read up on how to configure SQL Server TDE to encrypt SharePoint content that resides in databases, but what about encrypting the search indexes (which reside on the file system)?

Does anyone have any experience with this, and can you offer some advice / tips?

Questions I have are:

  • BitLocker or something else (like TrueCrypt?) - from my understanding of BitLocker, in order to use it to encrypt a non-OS volume, you must first encrypt the OS volume. Is that really necessary?
  • What accounts need to have access to the encrypted files so that the Search Service App can function properly? I'm guessing the crawl account needs to have access so it can write to the index, but what account is running the queries and reading the index?
  • Any other advice?
share|improve this question
up vote 0 down vote accepted

For the files being stored on the hard drive, your only way to encrypt that data would be through file system encryption. The only accounts that would really need access to that data would be the Farm Service and Search Service accounts. If you want to be absolutely certain that nothing else accesses that data, you could use a tool like SysInternals Process Monitor ( to monitor what processes access that data.

share|improve this answer
Also, according to, BitLocker is per volume. Meaning you could have multiple partitions on a single drive where only one partition is encrypted while the others are not. – John Chapman Oct 16 '12 at 23:00

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.