We have a replicated database configuration. We need to encrypt it. I understand I have to run dbunload -ar with -ea , -ek.

I will have to do this for each DB at each site - will I have to do this all at the same time or can I do a phased approach ?

Do the algorithm and key need to be the same on all the remote DB's and the consolidated DB ?

If I do just a few remote sites first will dbremote still function okay ?

Of course I will be testing all this on a dev platform first but thought I'd ask before I get oo far.

asked 02 May '18, 11:42

ThelmaCottage's gravatar image

ThelmaCottage
141131420
accept rate: 0%


I will have to do this for each DB at each site - will I have to do this all at the same time or can I do a phased approach ?

You can do a phased approach.

Do the algorithm and key need to be the same on all the remote DB's and the consolidated DB ?

No. Remember that when you start the database engine with a strongly encrypted database and/or connect to a strongly encrypted database, you will need to specify the encryption key. Your connection strings at each site will be different if you use a different key at each location.

If I do just a few remote sites first will dbremote still function okay ?

Yes. dbremote is unaffected by the change to a strongly encrypted database other than the fact that the connection string used to connect dbremote to the database is different.

Reg

permanent link

answered 02 May '18, 12:06

Reg%20Domaratzki's gravatar image

Reg Domaratzki
7.7k343118
accept rate: 37%

1

Note that in case you change the DBKEY lateron, you might need to supply the previous key for older logs in case they need to be read (say, because older transactions have to be re-sent).

(02 May '18, 12:23) Volker Barth
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×60
×46

question asked: 02 May '18, 11:42

question was seen: 1,185 times

last updated: 02 May '18, 12:24