Product Documentation

Database Administrator's Guide

Previous Topic

Next Topic

Master Encryption Key Management

With advanced encryption algorithms it is necessary to securely store, change or rotate encryption keys. Two recent advancements in FairCom DB technology make this much easier to manage.

A key store option is now available to allow uninterrupted FairCom DB operation during failover events. To change or rotate encryption keys, a utility is now provided to manage this process.

Note: To change the actual encryption of data within a file, it is necessary to completely read and unencrypt existing data and re-encrypt it with a new key. This can be accomplished by a compact of the file with encryption enabled. Compaction of the file creates new physical data and index files with new encryption keys assigned.