IBM Security Guardium

 View Only
Expand all | Collapse all

Encrypted database files decryption and migration scenarios

Jump to Best Answer
  • 1.  Encrypted database files decryption and migration scenarios

    Posted Wed June 08, 2022 11:35 AM
    Hi Team, A customer's is evaluating GDE for CTE Database Files encryption, As part of customer conversation we are having, customer's asking "What happened if I have to move my database to another server? Do I have to decrypt my database encrypted files before moving to another server?" "Can I decrypt my encrypted database files without using GDE using only the encryption key?" Any help will be appreciated. Thanks in advance.

    ------------------------------
    David Vicenteño Sanchez
    ------------------------------


  • 2.  RE: Encrypted database files decryption and migration scenarios
    Best Answer

    Posted Thu June 09, 2022 10:43 PM
    There are two options here that I can think of,

    Option 1:
    - Install the CTE agent on the new DB server and deploy with policy the same keys. 

    Option 2:
    - backup the database and define the rules with Backup process and Action - Permit and Apply Key so the data will be decrypt during backup process then restore to the new server.

    We can't decrypt the data with CTE agent.

    ------------------------------
    TS Teh
    ------------------------------



  • 3.  RE: Encrypted database files decryption and migration scenarios

    Posted Fri June 10, 2022 10:27 AM
    Thank you very much TS

    ------------------------------
    David Vicenteño Sanchez
    ------------------------------