SAP ASE version 16.0 adds new functionality to the sybmigrate utility.
Including:
- You can use
the sybmigrate utility to migrate a fully encrypted database
just as you would migrate an unencrypted database. However, to encrypt the
target database with the same database encryption key (DEK) as the source
database, you must perform the following before migrating the source database:
- Use ddlgen to generate DDL for master key, dual
master key, and the DEK (these keys are all in master
database):
$SYBASE/ASE-16_0/bin/ddlgen -Uusername -Ppwd -Shostname:port -TEK -Nmaster -Dmaster -XOD
$SYBASE/ASE-16_0/bin/ddlgen -Uusername -Ppwd -Shostname:port -TEK -Ndualmaster -Dmaster -XOD
$SYBASE/ASE-16_0/bin/ddlgen -Uusername -Ppwd -Shostname:port -TEK -Ndekname -Dmaster –XOD
Note: You
need not generate DDL for the dual master key if the DEK is
encrypted only by the master key.
- Execute the resulting DDL on the target server so it generates DEK with
same raw-key value.
- You can include the ssl keyword with the
source_ase or target_ase attribute,
allowing you to connect to SSL-enabled servers. The syntax is: