Novell EDIRECTORY 8.8 SP3, Administration Manual, Page: 241 / 634

Encrypting Data In eDirectory 241
n
ov
do
cx (e
n)
11
Ju
ly 20
08
You can select different encryption schemes for different attributes in a single encrypted attributes
policy. For example, in an encrypted attributes policy EP1, you can select both AES as the
encryption scheme for an attribute cubeno and Triple DES for an attribute empno. Refer to
“Creating and Defining Encrypted Attributes Policies” on page 242 for more information.
You can change the encryption scheme for an encrypted attribute by editing the encrypted attributes
policy. You can also unencrypt an attribute that you have encrypted earlier. Refer to
“Editing
Encrypted Attributes Policies” on page 242 for more information.
You can choose to have different encryption schemes in different servers of the replica ring. For
example, an attribute might be enabled for encryption using AES on Server1, Triple DES on Server2
and no encryption scheme on Server3.
10.1.2 Managing Encrypted Attributes Policies
You can manage encryption of the attributes by creating and defining policies and applying them to
servers.
You define an encrypted attributes policy by selecting the attributes for encryption and an encryption
scheme .
Figure 10-2
Encrypting Attributes
You can manage encrypted attributes policies using iManager. This section provides the following
information:
Š “Managing Encrypted Attributes Policies Through iManager” on page 242
Š
“Managing Encrypted Attributes Policies Through LDAP” on page 243
Š “Copying the Encrypted Attributes Policies” on page 244
Š
“Partition Operations” on page 244
Create and define
encypted attributes
policy
Select
server(s) to
apply encrypted
attributes
policy
Apply
encrypted attributes
policy
Select
attributes for
encryption
Select
encryption
scheme