Advanced Clusters

Back Next

Data encryption

Encryption protects the data that is used to process jobs. You can use encryption to protect data at rest, temporary data, and data in transit.

Encryption is available for the following types of data:

Data at rest: By default, Azure encrypts staging data and log files. For more information, refer to the Microsoft Azure documentation.

For information about encrypting source and target data, see the help for the appropriate connector in the
Data Integration
help.
Temporary data: Temporary data includes cache data and shuffle data that cluster nodes generate.

To encrypt temporary data, enable encryption in the
advanced configuration
. If you enable encryption, temporary data is encrypted using the HMAC-SHA1 algorithm by default. To use a different algorithm, contact Informatica Global Customer Support.
Data in transit: By default, Azure uses the Transport Layer Security (TLS) protocol to encrypt data in transit to and from cloud storage, including staging data and log files.

When encryption is enabled, you can specify the ABFSS protocol when you configure the staging and log locations in an
advanced configuration
. If encryption is not enabled, you must use the ABFS protocol.