If you set an encryption policy on an empty database object, as blocks are written to that object they are encrypted.
The following steps set an encryption policy on an empty Type I area, and then shows the status of the area after a table is defined and loaded with data:
1. Create an encryption policy for an empty area with EPOLICY MANAGE ENCRYPT:
proenv>proutil t1demo -C epolicy manage area encrypt "DataArea100"
OpenEdge Release 10.2B1P as of Fri Nov 20 19:01:52 EST 2009
Encryption policy setting for Area DataArea100 in Area 100
Cipher specification setting to AES_CBC_128 completed.
2. Create a table in the area and load data into it (not shown).
3. Check the encryption status of the area with EPOLICY SCAN:
proenv>proutil t1demo -C epolicy scan area "DataArea100"
OpenEdge Release 10.2B1P as of Fri Nov 20 19:01:52 EST 2009
AREA DataArea100 / 100 CURRENT AES_CBC_128 V:0 127 of 127 blocks encrypted
As new records are written to the DataArea100 area, they are encrypted. The output shows that the area has grown from 1 block to 127 blocks and that they are all encrypted.
