Modifying and Deleting a Column Encryption Key

Change the encryption key, with the option of adding dual control.

1. In the left pane of the Administration Console, expand ASE Servers > Security > Encryption Keys.
2. Click Column Encryption Keys.
3. Click the Name field of the column encryption key, then click the drop-down arrow.
4. (Optional) To change the encryption key:
   1. Select Change Password.
   2. Select one of these methods to encrypt the key:
      • Using a user-defined password – enter the old and new passwords, and confirm the new password. If With dual control is selected, both the master key and user-defined password are used to encrypt the column encryption key. Both master and dual-master keys are used for encryption if both exist in the database.
      • Using the master key – the server encrypts your key using the master key.
      • Using the system encryption password – the server encrypts your key using the system encryption password. Before choosing this option, ensure that a system encryption password exists in your database.

      (Optional) Select With dual control to use master and dual-master keys to control the security of your column encryption keys.

5. (Optional) To set the column encryption key, select Supply Password, and confirm it on the next screen.
6. (Optional) To delete the column encryption key, select Delete, and confirm it on the next screen.