Novell EDIRECTORY 8.8 - GUIDE, Manual

Page: 228 / 574

Encrypting Data In eDirectory 229
no
vd
ocx (
E
NU)
01
F
ebr
ua
ry
200
6
You can change the encryption scheme for an encrypted attribute by editing the encrypted attributes
policy. You can also unencrypt an attribute that you have encrypted earlier. Refer to
“Editing
Encrypted Attributes Policies” on page 230 for more information.
You can choose to have different encryption schemes in different servers of the replica ring. For
example, an attribute might be enabled for encryption using AES on Server1, Triple DES on Server2
and no encryption scheme on Server3.
9.1.2 Managing Encrypted Attributes Policies
You can manage encryption of the attributes by creating and defining policies and applying them to
servers.
You define an encrypted attributes policy by selecting the attributes for encryption and an encryption
scheme .
Figure 9-2
Encrypting Attributes
You can manage encrypted attributes policies using iManager. This section provides the following
information:
• “Managing Encrypted Attributes Policies Through iManager” on page 229
• “Managing Encrypted Attributes Policies Through LDAP” on page 231
• “Copying the Encrypted Attributes Policies” on page 232
• “Partition Operations” on page 232
Managing Encrypted Attributes Policies Through iManager
This section contains the following procedures:
• “Creating and Defining Encrypted Attributes Policies” on page 230
Create and define
encypted attributes
policy
Select
server(s) to
apply encrypted
attributes
policy
Apply
encrypted attributes
policy
Select
attributes for
encryption
Select
encryption
scheme