Encrypting Data and Log Outputs

Sybase SQL Anywhere database files and log files that are used as part of the Unwired Platform data tier can be encrypted. The databases that use this database type are the CDB, the monitoring database, and the domain log database.

1. Stop all Sybase Unwired Platform services.
2. Launch dbisql from <UnwiredPlatform_InstallDir>\Servers\SQLAnywhereXX\BINXX.
3. Connect to a database, other than the client database you want to encrypt.
4. From dbisql, issue:

   CREATE ENCRYPTED DATABASE ‘newdbfile’ FROM ‘existingdbfile’ KEY ‘someKey’ ALGORITHM ‘algorithm’

   Supported algorithms include:

   • SIMPLE
   • AES
   • AES256
   • AES_FIPS
   • AES256_FIPS

   Note: FIPS options are available only as a separately licensed option for SQLAnywhere.
5. Once the database files and log files are encrypted:
   1. Shut down the database server.
   2. Restart the database server with the -ek <encryption key> database option.
      This modifies the server startup to use the encrypted copy of the database file.
6. Restart all stopped services.