Line: 1 to 1 | ||||||||
---|---|---|---|---|---|---|---|---|
APPXIO Data Encryption | ||||||||
Line: 8 to 8 | ||||||||
OverviewRelease 5.0.0 or higher of the APPX Utility allows APPXIO data files to be optionally encrypted. Encrypting data files can provide an added layer of security for sensitive data. If an encrypted file is opened by any program other than APPX, the encrypted data is unintelligible. This means that backup copies of encrypted files on tape or disk are also secure since they cannot be deciphered without the appropriate software and encryption keys. If an encrypted data file is moved to another APPX server, it cannot be deciphered unless the APPX server is configured with the appropriate encryption keys and meets other necessary criteria. | ||||||||
Added: | ||||||||
> > | ||||||||
How to Enable APPXIO File Encryption | ||||||||
Changed: | ||||||||
< < | The APPXIO file encryption feature is easily enabled by entering a passphrase into the Encryption Passphrase field of the System Parameter Record in APPX System Administration. | |||||||
> > | The APPXIO file encryption feature is easily enabled by entering a passphrase into the Encryption Passphrase field of the System Parameter Record in APPX System Administration. | |||||||
Changed: | ||||||||
< < | Setting the system Encryption Passphrase enables the APPXIO file encryption feature but does not actually cause any files to be encrypted. To enable encryption of individual files, you must also enter an encryption key into the file specifications for each of the individual files that are to be encrypted or you must enter an encryption key into the FMS group specifications for each group of files that are to be encrypted. | |||||||
> > | Setting the system Encryption Passphrase "enables" the APPXIO file encryption feature but does not actually cause any files to be encrypted. To "enable" encryption of individual files, you must also enter an encryption key into the file specifications for each of the individual files that are to be encrypted or you must enter an encryption key into the FMS group specifications for each group of files that are to be encrypted. However, if any existing files are to be encrypted, they must be exported before you enter any encryption keys. | |||||||
Changed: | ||||||||
< < | Finally, after entering a system Encryption Passphrase and entering the appropriate encryption key(s), you must create the files that are to be encrypted. If the files already exist, they must be Initialized or Scratched and then Created. If existing files are to be encrypted, the data must be exported before entering the encryption keys and then imported. | |||||||
> > | After entering a system Encryption Passphrase, exporting any existing files that are to be encrypted, and entering the appropriate encryption key(s), you must create any new files that are to be encrypted and, if encrypting any existing files, you must import them with the "Replace" option. | |||||||
Changed: | ||||||||
< < | So, the three steps required to enable encryption of APPXIO data files are: | |||||||
> > | So, the steps required to enable encryption of APPXIO data files are: | |||||||
| ||||||||
Changed: | ||||||||
< < |
| |||||||
> > |
| |||||||
How to Set or Change the System Encryption PassphraseThe system Encryption Passphrase can be set or changed from the System Parameter maintenance screen: | ||||||||
Line: 33 to 38 | ||||||||
If no data files have actually been encrypted, the system Encryption Passphrase may be safely changed. However, if any data files have been encrypted, you must follow the steps outlined below to change the system Encryption Passphrase. If you do not follow these steps, any previously encrypted data files will no longer be accessible by the system. | ||||||||
Changed: | ||||||||
< < | ||||||||
> > | ||||||||
| ||||||||
Changed: | ||||||||
< < |
| |||||||
> > |
| |||||||
| ||||||||
Changed: | ||||||||
< < | How to Enter an Encryption Key For a File | |||||||
> > |
Enter/Edit File Encryption Keys | |||||||
Changed: | ||||||||
< < | The encryption key for a specific file is entered in Database Management. | |||||||
> > | The encryption key for a specific file can be set or changed in Database Management. | |||||||
Database Management --> File Specifications --> File AttributesThe same encryption key value can be entered for each file or each file can have its own unique encryption key. An easy way to ensure that each file has a unique encryption key is to use the Random Key button to automatically generate a random key for the file. If you choose to enter an encryption key, you should choose "strong" key values just as you would for a password. This means that your key should not be a common name or word, should include a mixture of letters, numbers, and special characters, and should be more than a few characters in length. | ||||||||
Changed: | ||||||||
< < | ||||||||
> > | ||||||||
Changed: | ||||||||
< < |
How to Enter an Encryption Key for a FMS group | |||||||
> > |
Enter/Edit FMS Group Encryption Keys | |||||||
The encryption key for a FMS group is entered in System Administration.
System Administration --> Configuration --> File System Groups --> FMS Group Attributes | ||||||||
Line: 59 to 65 | ||||||||
How to Create A New Encrypted File | ||||||||
Changed: | ||||||||
< < | The following steps must be followed to encrypt a new file. | |||||||
> > | The following steps should be followed to encrypt a new file.
| |||||||
| ||||||||
Changed: | ||||||||
< < | | |||||||
> > |
| |||||||
How to Encrypt an Existing FileThe following steps must be followed to encrypt an existing APPXIO file: | ||||||||
Changed: | ||||||||
< < |
How to Disable APPXIO File Encryption | |||||||
> > |
How to Decrypt an Encrypted File | |||||||
Sharing of Encrypted FilesEncrypted files are secure. If you copy them to another APPX system you will not be able to read them unless you use the same encryption keys that were used on the system that created the file and the same passphrase.Recovery of Corrupted Encrypted Files | ||||||||
Changed: | ||||||||
< < | Encrypted files which have become corrupted may be recovered by using the "recover" option of the APPX Utility engine. The recovery process for encrypted files is the same as the recovery process for non-encrypted files.
appx -recover [ -c ] old_file new_file [ del_rec_file ]For additional information on the use of the recover option, you can run: | |||||||
> > | Encrypted files which have become corrupted may be recovered by using the "recover" option of the APPX Utility engine. The recovery process for encrypted files is the same as the recovery process for non-encrypted files. For additional information on the use of the recover option, you can run: | |||||||
appx -recover Recovery of Undecipherable Encrypted Files | ||||||||
Line: 110 to 110 | ||||||||
-- AlKalter - 04 Apr 2008 | ||||||||
Deleted: | ||||||||
< < | ||||||||
|