Difference: APPXIODataEncryption (8 vs. 9)

Revision 92008-09-23 - SteveFrizzell

Line: 1 to 1
 
META TOPICPARENT name="APPX500Features"

APPXIO Data Encryption

Line: 8 to 8
 

Overview

Release 5.0.0 or higher of the APPX Utility allows APPXIO data files to be optionally encrypted.  Encrypting data files can provide an added layer of security for sensitive data.  If an encrypted file is opened by any program other than APPX, the encrypted data is unintelligible.  This means that backup copies of encrypted files on tape or disk are also secure since they cannot be deciphered without the appropriate software and encryption keys.  If an encrypted data file is moved to another APPX server, it cannot be deciphered unless the APPX server is configured with the appropriate encryption keys and meets other necessary criteria.

Added:
>
>
 

How to Enable APPXIO File Encryption

Changed:
<
<		The APPXIO file encryption feature is easily enabled by entering a passphrase into the Encryption Passphrase field of the System Parameter Record in APPX System Administration.
>
>		The APPXIO file encryption feature is easily enabled by entering a passphrase into the Encryption Passphrase field of the System Parameter Record in APPX System Administration.
 
Changed:
<
<		Setting the system Encryption Passphrase enables the APPXIO file encryption feature but does not actually cause any files to be encrypted.  To enable encryption of individual files, you must also enter an encryption key into the file specifications for each of the individual files that are to be encrypted or you must enter an encryption key into the FMS group specifications for each group of files that are to be encrypted.
>
>		Setting the system Encryption Passphrase "enables" the APPXIO file encryption feature but does not actually cause any files to be encrypted.  To "enable" encryption of individual files, you must also enter an encryption key into the file specifications for each of the individual files that are to be encrypted or you must enter an encryption key into the FMS group specifications for each group of files that are to be encrypted. However, if any existing files are to be encrypted, they must be exported before you enter any encryption keys.
 
Changed:
<
<		Finally, after entering a system Encryption Passphrase and entering the appropriate encryption key(s), you must create the files that are to be encrypted.  If the files already exist, they must be Initialized or Scratched and then Created. If existing files are to be encrypted, the data must be exported before entering the encryption keys and then imported.
>
>		After entering a system Encryption Passphrase, exporting any existing files that are to be encrypted, and entering the appropriate encryption key(s), you must create any new files that are to be encrypted and, if encrypting any existing files, you must import them with the "Replace" option.
 
Changed:
<
<		So, the three steps required to enable encryption of APPXIO data files are:
>
>		So, the steps required to enable encryption of APPXIO data files are:
 
  1. Enter a system Encryption Passphrase
Changed:
<
<
  1. Enter the appropriate encryption keys
  2. Create/Initialize the files that are to be encrypted
>
>
  1. Export any existing files that are to be encrypted
  2. Enter the appropriate encryption keys for individual files and FMS groups as appropriate
  3. Create any new files and import any existing files that are to be encrypted

 

How to Set or Change the System Encryption Passphrase

The system Encryption Passphrase can be set or changed from the System Parameter maintenance screen:

Line: 33 to 38
  If no data files have actually been encrypted, the system Encryption Passphrase may be safely changed.  However, if any data files have been encrypted, you must follow the steps outlined below to change the system Encryption Passphrase.  If you do not follow these steps, any previously encrypted data files will no longer be accessible by the system.
Changed:
<
<		 
>
>		 
 
  1. Make sure that no users are accessing the system  Do not attempt to change the system Encryption Passphrase while other users are accessing the system.
  2. Export all of the encrypted APPXIO data files in all APPX databases.  The Export utility on the Database Management menu should be used to export the encrypted APPXIO data files.
Changed:
<
<
  1. Use the System Parameters maintenance process in System Administration to change the system Encryption Passphrase.  The Set/Change Passphrase screen includes a report that can be run to obtain a list of all FMS groups and files which have been encrypted.  Use this list to verify that you have exported all of the encrypted files.
  2. Change all of the encryption keys that have been entered for individual files and for FMS groups.
>
>
  1. Use the System Parameters maintenance process in System Administration to change the system Encryption Passphrase.  The Set/Change Passphrase screen includes a report that can be run to obtain a list of all FMS groups and files which have been encrypted.  Use this list to verify that you have exported all of the encrypted files.
  2. Change all of the encryption keys that have been entered for individual files and for FMS groups.
 
  1. Import all of the APPXIO data files that you exported in step 1.  Be sure to specify the "Replace" option for the data import.
Changed:
<
<

How to Enter an Encryption Key For a File

>
>

Enter/Edit File Encryption Keys

 
Changed:
<
<		The encryption key for a specific file is entered in Database Management.
>
>		The encryption key for a specific file can be set or changed in Database Management.
 
Database Management --> File Specifications --> File Attributes

The same encryption key value can be entered for each file or each file can have its own unique encryption key.  An easy way to ensure that each file has a unique encryption key is to use the Random Key button to automatically generate a random key for the file.  If you choose to enter an encryption key, you should choose "strong" key values just as you would for a password.  This means that your key should not be a common name or word, should include a mixture of letters, numbers, and special characters, and should be more than a few characters in length.

Changed:
<
<		FileEncryptionKey.PNG
>
>		FileEncryptionKey.PNG
 
Changed:
<
<		 

How to Enter an Encryption Key for a FMS group

>
>

Enter/Edit FMS Group Encryption Keys

  The encryption key for a FMS group is entered in System Administration.
System Administration --> Configuration --> File System Groups --> FMS Group Attributes
Line: 59 to 65
 FMSGroupEncryptionKey.PNG

How to Create A New Encrypted File

Changed:
<
<		The following steps must be followed to encrypt a new file.
>
>		The following steps should be followed to encrypt a new file.
  1. If APPXIO file encryption has not already been enabled on your system, first follow the steps for enabling APPXIO file encryption.
 
  1. Add the file to the data dictionary in your APPX Application.
Changed:
<
<
  1.  
>
>
  1. Enter the appropriate encryption key in the file specifications for the file that you wish to encrypt or assign the file to an FMS group that has an encryption key.
  2. Create the file. 
 

How to Encrypt an Existing File 

The following steps must be followed to encrypt an existing APPXIO file:

Changed:
<
<
  1. Export the APPXIO data file
  2. Assign an FMS group that has encryption specified to the

If the file already exists in an unencrypted state, you should first export the data.

To encrypt a file, you must first enter a passphrase in your system admin parameter record.

Then, you must enter encryption keys in the file specification for the file that you wish to encrypt or define an FMS group with encryption keys and assign the FMS group to the file that you wish to encrypt.

Then you can create the file or, if the file already exists, you can import the data that you previously exported.  If you import, be sure to specify the replace option so that the old file will be scratched and recreated as an encrypted file.

How to Disable APPXIO File Encryption

>
>
  1. If APPXIO file encryption has not already been enabled on your system, first follow the steps for enabling APPXIO file encryption.
  2. Export the file that is to be encrypted.  If the file has been created in more than one database, you must export each instance of the file that is to be encrypted.
  3. Enter the appropriate encryption key in the file specifications for the file that you wish to encrypt or assign the file to an FMS group that has an encryption key.
  4. Import the file.  Be sure to specify the "Replace" option when importing the file.

How to Decrypt an Encrypted File

 

Sharing of Encrypted Files

Encrypted files are secure.  If you copy them to another APPX system you will not be able to read them unless you use the same encryption keys that were used on the system that created the file and the same passphrase.

Recovery of Corrupted Encrypted Files

Changed:
<
<		Encrypted files which have become corrupted may be recovered by using the "recover" option of the APPX Utility engine.  The recovery process for encrypted files is the same as the recovery process for non-encrypted files.
appx -recover [ -c ] old_file new_file [ del_rec_file ]

For additional information on the use of the recover option, you can run:

>
>		Encrypted files which have become corrupted may be recovered by using the "recover" option of the APPX Utility engine.  The recovery process for encrypted files is the same as the recovery process for non-encrypted files.  For additional information on the use of the recover option, you can run:
 
appx -recover

Recovery of Undecipherable Encrypted Files

Line: 110 to 110
  -- AlKalter - 04 Apr 2008
Deleted:
<
<
 
META FILEATTACHMENT attachment="SystemParameters5.0.0.PNG" attr="h" comment="System Parameters Maintenance" date="1222092657" name="SystemParameters5.0.0.PNG" path="C:\Documents and Settings\steve\My Documents\My Pictures\SystemParameters5.0.0.PNG" size="34315" stream="C:\Documents and Settings\steve\My Documents\My Pictures\SystemParameters5.0.0.PNG" user="Main.SteveFrizzell" version="1"
META FILEATTACHMENT attachment="Set-ChangePassphrase5.0.0.PNG" attr="h" comment="Set/Change Encryption Passphrase" date="1222092704" name="Set-ChangePassphrase5.0.0.PNG" path="C:\Documents and Settings\steve\My Documents\My Pictures\Set-ChangePassphrase5.0.0.PNG" size="35688" stream="C:\Documents and Settings\steve\My Documents\My Pictures\Set-ChangePassphrase5.0.0.PNG" user="Main.SteveFrizzell" version="1"
META FILEATTACHMENT attachment="FileEncryptionKey.PNG" attr="h" comment="Enter or Generate Encryption Key for File" date="1222110751" name="FileEncryptionKey.PNG" path="C:\Documents and Settings\steve\My Documents\My Pictures\FileEncryptionKey.PNG" size="31424" stream="C:\Documents and Settings\steve\My Documents\My Pictures\FileEncryptionKey.PNG" user="Main.SteveFrizzell" version="1"
View topic | History: r13 < r12 < r11 < r10 | More topic actions...
 
This site is powered by the TWiki collaboration platform Powered by PerlCopyright © 2008-2024 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback