I have read up on how to configure SQL Server TDE to encrypt SharePoint content that resides in databases, but what about encrypting the search indexes (which reside on the file system)?
Does anyone have any experience with this, and can you offer some advice / tips?
Questions I have are:
- BitLocker or something else (like TrueCrypt?) - from my understanding of BitLocker, in order to use it to encrypt a non-OS volume, you must first encrypt the OS volume. Is that really necessary?
- What accounts need to have access to the encrypted files so that the Search Service App can function properly? I'm guessing the crawl account needs to have access so it can write to the index, but what account is running the queries and reading the index?
- Any other advice?