IBM Database Encryption Expert

IBM Database Encryption Expert is designed to help organizations comply with regulations and legislative acts and ensure that private and confidential data is strongly protected. Database Encryption Expert can protect sensitive information in both online and offline environments and has centralized policy and key management to simplify data security management. The tool can help:

• Minimize the risk of data backups, which are typically written to portable media and stored offsite for long periods of time, making the data more vulnerable to loss
• Reduce the risk of replicated data being stolen or lost
• Limit privileged user access to sensitive data

Maintaining compliance with government data privacy acts and industry regulations (for example, PCI- DSS) can be challenging, IBM Database Encryption Expert can protect your data and help you avoid the negative impact of a data breach.

Features

Online data encryption capabilities:

• Protects sensitive DB2 data without requiring changes to the database schema or database applications
• Provides a method for creating a centralized encryption and key management policy
• Protects sensitive data from outside of DB2 through the implementation of privileged userids
• Minimal performance impact especially compared to alternative encryption techniques
• Protects database table containers and any other sensitive DB2 files
• Provides access control to DB2 files by user and application

Offline data encryption capabilities:

• Protects DB2 database backups by using offline encryption technology
• Compresses database backups to save storage space
• Ensures privacy and enables compliance
• Encrypts at high speeds
• Provides centralized policy and key management
• Utilizes policies that control which keys are used
• Audits key usage

Offline data encryption benefits:

• Transparently interoperates with DB2 backup
• Requires no changes to current backup/recovery processes
• Provides centralized policy and key administration
• Includes automatic key management
• Performs high-performance encryption and compression
• Allows the administrator to control which archives are encrypted
• Performs standard AES 128/256 encryption
• Audits and tracks encryption key usage
• Securely exchanges encrypted archives with affiliates without divulging internal keys

Related Tools

IBM Data Governance Solution

Hardware Requirements

Encryption Expert Security Server:

• Intel P4 2.4 GHZ equivalent, or later
• 2 GB memory
• 20 GB of free disk space

Encryption Expert DB2 Agent:

• AIX: PowerPC 4 or PowerPC 5 Hardware capable of running DB2 V8 or DB2 V9 on AIX 5L V5.2 or AIX 5L V5.3 (64-bit platform)
• Linux: Intel x86_64 or AMD Opteron Hardware capable of running DB2 V8 or DB2 V9 on Linux RedHat 4, Update 4 (64-bit platform)
• Memory and disk space sufficient to fulfill DB2 minimum requirements

Encryption Expert Administrative Client:

• Any hardware capable of running Internet Explorer 6.0, or later

Software Requirements

Encryption Expert Security Server: Red Hat Advance Server 4.0 Update 4 (32-bit)

Encryption Expert DB2 Agent:

• AIX (64-bit):
  • AIX 5L 5.2 must be running Technology Level 10, Service Pack 02 (APAR IZ10719)
  • AIX 5L 5.3 must be running Technology Level 06, Service Pack 03 (APAR IZ07461)
• Linux (64-bit):
  • Red Hat Advance Server 4.0 Update 4
• DB2 V8 Fixpack 14, or later
• DB2 V9.1