Configuration Guide

10.4

Back Next

Step 2. Configure the Data Encryption Properties File

Informatica provides a sample data encryption properties file that includes the parameters that the data encryption implementation requires. You can customize the sample properties file to specify the options for the data encryption implementation.

Find the

dataencryption.properties

file in the following directory:

On UNIX.

<ResourceKit_install_dir>/DataEncryption/resources

On Windows.

<ResourceKit_install_dir>\DataEncryption\resources

Create a backup copy of the

dataencryption.properties

file.

Use a text editor to open the file and edit the data encryption parameters.

Provide a reference to the DataEncryptor interface implementation.

Configure EJBSiperianClient to encrypt and decrypt base object columns that have sensitive data, their associated tables such as history and cross-reference tables, and packages.

Use the following syntax to specify the base object column names, the associated tables such as history and cross-reference tables, and packages:

API.<ORS_ID>.BASE_OBJECT.<BASE_OBJECT_NAME>.<COLUMN_NAME>
API.<ORS_ID>.XREF.<CROSS_REFERENCE_TABLE_NAME>.<COLUMN_NAME>
API.<ORS_ID>.HISTORY.<HISTORY_TABLE_NAME>.<COLUMN_NAME>
API.<ORS_ID>.PACKAGE.<PACKAGE_NAME>.<COLUMN_NAME>
API.<ORS_ID>.HM_ENTITY_TYPE.<HIERARCHY_MANAGER_ENTITY_NAME>.<COLUMN_NAME>

If you want to use fuzzy match and fuzzy search operations, specify the match fields to use.

Use the following syntax to specify a match field name:

MATCHFIELD.<ORS_ID>.BASE_OBJECT.<BASE_OBJECT_NAME>.<MATCH_FIELD_NAME>

Ensure that the base object that you specify is the base object that you are matching on, which is the root of the match path component. Even where match field is from a base object that is not the root of the match path component, specify the base object that is the root of the match path component.

If a match field is a concatenation of multiple columns, you must encrypt each of these columns even if the columns do not contain data.

Configure the input and output ports of cleanse functions that must encrypt and decrypt data.

Use the following syntax to specify the input and output ports of cleanse functions: