Hi Everyone,

I am trying to implement encryption in sql server 2005 through Certificate and Symmetric Key

and i came to know that the application user should have the following access in order to Encrypt and Decrypt Data

1) CONTROL permission on Certificate and 2) REFERENCES on the Symmetric Key

(Let me know if i am wrong)

Now my concern is what does CONTROL mean in the context of Certificate? If my User1 has Control permission on my certificate Cert1 What all can he do, Is there a way to restrict him further, but user1 still be able to Encrypt\Decrypt the data

I could not find any good practice doc for certificate and key management so can some one advice the good practice for this

Thanks, Ram