Re: Powertech Field Level Encryption and taking a SAVF

Matt

I’ll take a look at a couple possible solutions for you when I get into the office this morning.

Powertech Encryption is a great product and when there are concerns of performance with DB2 at rest encryption, it usually just extends to the nature of encryption itself and the functionality of field procedures.

Let me try a couple things related to your situation and I’ll provide an update later today.

Jay

On Jul 14, 2021, at 10:08 PM, Jay Vaughn <jeffersonvaughn@xxxxxxxxx> wrote:



Sent from my iPhone

Begin forwarded message:

From: Matt Olson via MIDRANGE-L <midrange-l@xxxxxxxxxxxxxxxxxx>
Date: July 14, 2021 at 3:27:41 PM EDT
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Cc: Matt Olson <Matt.Olson@xxxxxxxx>
Subject: Powertech Field Level Encryption and taking a SAVF
Reply-To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>

How are you all taking a SAVF of a library that has tables encrypted with PowerTech and restoring that SAVF onto a completely different IBMi to refresh your dev libraries?

We currently decrypt everything (requires a complete outage of our systems so Powertech can get an exclusive lock on files) and then do the SAVF, then re-encrypt everything.

This takes a lot of downtime to perform, making data refreshes to other partitions very difficult and subsequently very infrequent due to the difficulty.

It is with this difficulty that we are contemplating switching to IBMi's built in full disk encryption instead and chuck Powertech out the window since we only use it for the data at rest functionality.

So we could get full disk coverage instead of the handful of columns from a few database files that have PII data in them encrypted. Additionally, we could finally do a WHERE SSN like %123% query again without bring the CPU to 100% for 5 minutes because the Powertech field procedure is choking on the data.

Thoughts?
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: https://amazon.midrange.com