[Progress Communities] [Progress OpenEdge ABL] Forum Post: RE: How to use Transparent Data Encryption?

[JonathanWilson]

First off if you're a DBA that likes a GUI switch to MS-SQL; ChUI for the win! It's easy enough to setup, what you want to read is the Database Administration guide chapter 10 community.progress.com/.../2911.openedge-11-7-product-documentation --------------- Mare sure the follow AREA exists, must have exact area name: addenc.st e "Encryption Policy Area":15,32;64 ./data6/trans_15.d1 prostrct add trans addenc.st proutil trans -C enableencryption -Cipher 3 -Autostart admin Admin Password: ************* User Password: ************* proutil trans -C enableencryption -Cipher 3 -Autostart admin OpenEdge Release 11.6.1 as of Fri Feb 19 18:20:45 EST 2016 Area Encryption Policy Area/93 contains Encryption Schema (17287) Cipher specification being set to AES_CBC_256 (15422) Autostart option has been selected. (15424) Key store administrator passphrase [required]: Please Retype your Passphrase for Verification Key store administrator passphrase [required]: Key store user passphrase [optional]: Please Retype your Passphrase for Verification Key store user passphrase [optional]: The BI file is being automatically truncated. (1526) BI encryption enabled successfully. (15204) Encryption has been successfully enabled. Keep the following somewhere safe but not with the DB backup New file trans.ks BI/AI should be encrypted proutil trans -C enableencryption -biencryption enable proutil dbname -C enableencryption -aiencryption enable rfutil dbname -C aimage begin -aiencryption enable ** DB already enabled for encyption proutil trans -C epolicy manage table encrypt address OpenEdge Release 11.6.1 as of Fri Feb 19 18:20:45 EST 2016 Encryption policy setting for Table address in Area 10. (15629) Cipher specification setting to AES_CBC_128 completed. (15491) ### Always best scan; need to make sure the data was encrypted; the following shows it's still in the middle of being updated proutil trans -C epolicy scan table address OpenEdge Release 11.6.1 as of Fri Feb 19 18:20:45 EST 2016 TABLE address / 1 CURRENT AES_CBC_128 V:0 7 of 8 blocks encrypted

Continue reading...