IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Encrypted database files decryption and migration scenarios

    Posted Wed June 08, 2022 11:35 AM
    Hi Team, A customer's is evaluating GDE for CTE Database Files encryption, As part of customer conversation we are having, customer's asking "What happened if I have to move my database to another server? Do I have to decrypt my database encrypted files before moving to another server?" "Can I decrypt my encrypted database files without using GDE using only the encryption key?" Any help will be appreciated. Thanks in advance.

    ------------------------------
    David Vicenteño Sanchez
    ------------------------------


  • 2.  RE: Encrypted database files decryption and migration scenarios
    Best Answer

    Posted Thu June 09, 2022 10:43 PM
    There are two options here that I can think of,

    Option 1:
    - Install the CTE agent on the new DB server and deploy with policy the same keys. 

    Option 2:
    - backup the database and define the rules with Backup process and Action - Permit and Apply Key so the data will be decrypt during backup process then restore to the new server.

    We can't decrypt the data with CTE agent.

    ------------------------------
    TS Teh
    ------------------------------



  • 3.  RE: Encrypted database files decryption and migration scenarios

    Posted Fri June 10, 2022 10:27 AM
    Thank you very much TS

    ------------------------------
    David Vicenteño Sanchez
    ------------------------------