Encrypting Data and Log Outputs

Sybase SQL Anywhere database files and log files that are used as part of the Unwired Platform data tier can be encrypted. The databases that use this database type are the CDB, the monitoring database, and the domain log database.

1. Stop all Sybase Unwired Platform services.
2. From dbisql, issue:

   CREATE ENCRYPTED DATABASE ‘newdbfile’ FROM ‘existingdbfile’ KEY ‘someKey’ ALGORITH ‘algorithm’

   Supported algorithms include:

   • SIMPLE
   • AES
   • AES256
   • AES_FIPS
   • AES256_FIPS
   FIPS options areavailable only as a separately licensed option for SQLAnywhere.
3. Once the database files and log files are encrypted:
   1. Shut down the database server and modify its start-up to use the encrypted copy.
   2. Change the database command line options to include the -ek <encryption key> database option.
4. Start the database server then restart all stopped services.