The size of the dictionary cache in main memory. Increase the memory size in order to improve performance. Minimum recommended size is 32 MB for 100,000 records. Default is 8 MB.

The location of the dictionary cache. You must have write permissions for the directory. Default is $PMCacheDir.

Enables sharing of the storage table between Data Masking transformation instances. Enable Shared Storage Table when two Data Masking transformation instances use the same dictionary column for the database connection, seed value, and locale. You can also enable the shared storage table when two ports in the same Data Masking transformation use the same dictionary column for the connection, seed, and locale. Disable the shared storage table when Data Masking transformations or ports do not share the dictionary column. Default is disabled.

The number of rows to commit at a time to the storage table. Increase the value to increase performance. Configure the commit interval when you do not configure the shared storage table. Default is 100,000.

Encrypts storage tables, such as IDM_SUBSTITUTION_STORAGE and IDM_EXPRESSION_STORAGE. Verify that you have encrypted data in storage tables before you enable the encrypt storage property. Clear this option if you do not want to encrypt the storage tables. Default is disabled.

The Data Masking transformation encrypts the storage based on the storage encryption key. Use the same encryption key for each session run of the same Data Masking transformation instance.

Required for format preserving encryption. Choose whether to use SoftHSM during encryption. SoftHSM is more secure, but you might notice a difference in performance.

Required for format preserving encryption. The passphrase generates a key to encrypt or decrypt data. You can choose to enter an encrypted passphrase or a passphrase in plain text. Use the site key to encrypt the passphrase and enter the encrypted value.

For mappings that you create in the Designer tool, you can choose to enter an encrypted passphrase or a passphrase in plain text. For workflows that you generate in Test Data Management, the option is always Yes.

Required for format preserving encryption. Determines whether the Data Masking transformation performs encryption or decryption of the data. Set the value to Encryption to encrypt source data. To decrypt the masked data and return the original source data, run a mapping with the same encryption technique configuration and passphrase, with the mode set to Decryption.