Communities
A collaborative platform to connect and grow with like-minded Informaticans across the globe
Product Communities
Connect and collaborate with Informatica experts and champions
Discussions
Have a question? Start a Discussion and get immediate answers you are looking for
User Groups
Customer-organized groups that meet online and in-person. Join today to network, share ideas, and get tips on how to get the most out of Informatica
Get Started
Community Guidelines
Knowledge Center
Troubleshooting documents, product guides, how to videos, best practices, and more
Knowledge Base
One-stop self-service portal for solutions, FAQs, Whitepapers, How Tos, Videos, and more
Support TV
Video channel for step-by-step instructions to use our products, best practices, troubleshooting tips, and much more
Documentation
Information library of the latest product documents
Velocity (Best Practices)
Best practices and use cases from the Implementation team
Learn
Rich resources to help you leverage full capabilities of our products
Trainings
Role-based training programs for the best ROI
Certifications
Get certified on Informatica products. Free, Foundation, or Professional
Product Learning Paths
Free and unlimited modules based on your expertise level and journey
Resources
Library of content to help you leverage the best of Informatica products
Tech Tuesdays Webinars
Most popular webinars on product architecture, best practices, and more
Product Availability Matrix
Product Availability Matrix statements of Informatica products
SupportFlash
Monthly support newsletter
Support Documents
Informatica Support Guide and Statements, Quick Start Guides, and Cloud Product Description Schedule
Product Lifecycle
End of Life statements of Informatica products
Ideas
Events
Change Request Tracking
Marketplace
English
  • Dynamic Data Masking 9.9.3
  • All Products

Table of Contents

Search

  1. Preface
  2. Introduction to Dynamic Data Masking Administration
  3. Authentication
  4. Security
  5. Connection Management
  6. JDBC Client Configuration
  7. ODBC Client Configuration
  8. Configuration for MicroStrategy
  9. Access Control
  10. Logs
  11. High Availability
  12. Server Control
  13. Performance Tuning
  14. Troubleshooting
  15. Appendix A: Database Keywords

Administrator Guide

Administrator Guide

Back Next

SSL Communication in Dynamic Data Masking

SSL Communication in Dynamic Data Masking

Dynamic Data Masking supports SSL communication between the Dynamic Data Masking Server and multiple database instances, types, and clients, such as the Management Console and Server Control. The Dynamic Data Masking Server can load multiple existing keystores and truststores, which in most cases you can copy from the database or database client to the Dynamic Data Masking installation without any modification.
When you enable SSL communication, you configure the
cfg/ddm.security
 file for keystores and truststores used by the Dynamic Data Masking Server. You also configure the
cfg/client.security
 file for truststores used by clients such as the Management Console and Server Control. Configuration parameters for the
cfg/client.security
 and
cfg/ddm.security
 files are the same.
You also use the
cfg/ddm.security
 file to configure key strategies and trust strategies. Key strategies are required when Dynamic Data Masking uses multiple signed certificates to perform the handshake with database clients. Trust strategies tell Dynamic Data Masking how to handle a certificate that does not exist in the Dynamic Data Masking truststore and is therefore rejected by the trust manager.
Dynamic Data Masking supports various security protocol and cipher suites. You can define global settings for security protocols and cipher suites, or you can configure protocols and ciphers that map to a specific Dynamic Data Masking host and port.
You can enable SSL communication for Oracle, IBM Db2, and Microsoft SQL Server target databases.
0 COMMENTS
We’d like to hear from you!