Novell EDIRECTORY 8.8 - GUIDE, Manual, Page: 234 / 574

Encrypting Data In eDirectory 235
no
vd
ocx (
E
NU)
01
F
ebr
ua
ry
200
6
For more information on adding eDirectory 8.8 server to the replica ring, refer to “Adding a
Replica” on page 133 .
9.1.8 Backward Compatibility
You need to change all eDirectory utilities like iManager, SNMP, DirXML
®
and NSureAudit to
secure NCP
TM
to access encrypted attributes. Otherwise, you need to specify that a secure channel is
not necessary to access the encrypted attributes. Refer to “Enabling and Disabling Access to
Encrypted Attributes Over Clear Text Channels” on page 233 for more information.
9.1.9 Migrating to Encrypted Attributes
When you upgrade to eDirectory 8.8 or later versions, you can encrypt the existing attributes by
creating and defining encrypted attributes policies. For more information, refer to
Section 9.1.2,
“Managing Encrypted Attributes Policies,” on page 229 .
9.1.10 Replicating the Encrypted Attributes
By default, encrypted replication is not enabled even if the server has the encrypted attributes. You
need to enable encrypted replication for replicating the encrypted attributes securely. For
configuring encrypted replication, refer to
Section 9.2, “Encrypted Replication,” on page 235 .
9.2 Encrypted Replication
In Novell eDirectory 8.8 and later, you can encrypt data that is transmitted between eDirectory 8.8
servers. This offers a high level of security during replication as the data does not flow in clear text.
Refer to the Novell eDirectory 8.8 What's New Guide (http://www.novell.com/documentation/
edir88/edir88new/data/bqljql1.html#bqljql1) for more information on the need for encrypted
replication and sample scenarios of encrypting data during replication.
Figure 9-3
Encrypted Replication
Enable ER
Sensitive Data
Non-Sensitive Data
Replication in encrypted form