Step-by-Step Guide: How to patch SQL Server, part 2

By Chip Andrews, Contributor 14 Apr 2005 | SearchSQLServer.com

Digg This!     StumbleUpon     Del.icio.us

Welcome to part two of our series on finding and patching SQL Servers in your organization. In part one we discussed how to find all of the SQL Server instances on your network. In this part, we'll discuss patch deployment and the various options available to you.

Deployment of SQL Server patches is critical to maintain security and yet, to this day, it remains a very complicated process. For starters, you'll need to understand the difference between service packs and hotfixes. A service pack is a major product update that generally includes all bug fixes, security fixes and (in some cases) new features since the last service pack or the original release.

Hotfixes released from QFE (Quick Fix Engineering, from Microsoft) usually contain only interim bug fixes or security patches for new problems found between service packs. It should be noted that hotfixes, while cumulative as a rule (so you only need the latest one), are not regression tested, so their application involves a much larger degree of risk as opposed to the well-tested service pack releases.

HOW TO PATCH SQL SERVER, PART 2

 Home: Introduction
 Step 1: Segregate your scan results
 Step 2: Obtain service packs and prepare for deployment
 Step 3: Deploy service packs
 Step 4: Obtain hotfixes and prepare for deployment
 Step 5: Deploy hotfixes
 Step 6: Re-assess network
 Step 7: Plan next assessment
 Back: How to patch SQL Server, part 1

ABOUT THE AUTHOR:

Chip Andrews, CISSP Chip Andrews is the director of research and development for Special Ops Security Inc. and the founder of the SQLSecurity.com Web site, which focuses on Microsoft SQL Server security topics and issues. He is also the author of SQL Server Security. Copyright 2005 TechTarget

Tags: SQL Server Security,  SQL Server Migration Strategies and Planning,  VIEW ALL TAGS

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT SQL Server Security Password cracking tools for SQL Server Meet compliance requirements with improved database security practices Hardening the network and OS for SQL Server security Securing the server and database in SQL Server SQL Server security made simple and sensible Blog: Protect your databases from the internal threat Setting up SQL Server Service Broker for secure communication The keys to database backup protection for SQL Server Understanding transparent data encryption in SQL Server 2008 The fine line between not encrypting your databases and breach notification SQL Server Migration Strategies and Planning eZines and eBooks for SQL Server professionals New SQL Server 2008 R2 CTP set for November PASS Summit 2009 Preview Are data warehouses made for the cloud? Q&A: Moving forward with SQL Server in the cloud SQL Server Mailbag: Migrating down to Standard Edition Microsoft releases SQL Server 2008 R2 CTP A first look at Microsoft SQL Server 2008 R2 Using Microsoft Hyper-V for SQL Server consolidation Migrating to SQL Server 2008 and leveraging new features

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary data corruption  (SearchSQLServer.com) data hiding  (SearchSQLServer.com)

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary