Create and update encryption policies with the Edit Encryption Policy dialog box.
The Edit Encryption Policy dialog box allows you to:
Enable or disable encryption for an object
Generate a new encryption key for an encrypted object
Copy encryption policies to multiple objects
To create an encryption policy for a database object:
1. From the Data Dictionary, choose Admin > Security > Encryption Policies > Edit Encryption Policy. The Object Selector dialog box appears:
The initial view displays the tables and indexes of the connected database with encryption both enabled and disabled. You can change the list to view different sets of objects by checking and unchecking the Show boxes. For example, to also see LOBs, check Show LOBs; to only see objects with an existing encryption policy, for Show Encryption check Enabled, and uncheck Disabled.
2. Scroll through the list, selecting objects, or click Select Some to bring up the Select Objects by Pattern Match dialog box to refine the list. Enter the object name or pattern in the Object Name fill-in and click OK. When you return to the Object Selector dialog box, any objects matching the pattern are added to the selected objects.
3. If you selected too many objects, clicking Deselect Some brings up the Deselect Objects by Pattern Match dialog box, allowing you to enter an object name or pattern to deselect. Click OK to return to the Object Selector dialog box with any objects matching the specified pattern deselected.
4. Once you have selected all the objects, click OK to proceed. The Edit Encryption Policy dialog box appears:
Note: Passphrase and Verify Passphrase are always disabled.
5. Select an object and check Encryption enabled. The default cipher, AES_CBC_128, is selected. Change the cipher if desired. Click Save to save the change, or Reset to undo the change.
Note: The change is not committed to the database until you click Commit.
6. When you have save a change, the Copy button is activated. Click Copy to propagate your change to multiple objects at once. Clicking Copy brings up the Copy Encryption Policy Setting To dialog box, as shown:
You can select a single object or multiple objects. When you have selected all you want to copy the setting to, click OK to return to the Edit Encryption Policy dialog box.
7. Continue selecting and modifying object settings until you have specified all the objects you want to change. An asterisk (*) in front of the object name indicates you made changes to it. Click Review at any time to view the status of your changes.
8. When your changes are complete, click Commit to commit the changes to the database, or Revert, to cancel all your changes. If you choose to commit your changes, you are asked to confirm; click Yes to commit your changes.
Enable or disable encryption for an object
