IBM Database Encryption Expert

Online data encryption capabilities:

• Protects sensitive DB2 and IDS data without requiring changes to the database schema or database applications

• Provides a method for creating a centralized encryption and key management policy

• Protects sensitive data from outside of DB2 and IDS through the implementation of privileged userids

• Minimal performance impact especially compared to alternative encryption techniques

• Protects database table containers and any other sensitive DB2 and IDS files

• Provides access control to DB2 and IDS files by user and application

Offline data encryption capabilities:

• Protects DB2 and IDS database backups by using offline encryption technology

• Compresses database backups to save storage space

• Ensures privacy and enables compliance

• Encrypts at high speeds

• Provides centralized policy and key management

• Utilizes policies that control which keys are used

• Audits key usage

Offline data encryption benefits:

• Transparently interoperates with DB2 backup and IDS ontape/onbar

• Requires no changes to current backup/recovery processes

• Provides centralized policy and key administration

• Includes automatic key management

• Performs high-performance encryption and compression

• Allows the administrator to control which archives are encrypted

• Performs standard AES 128/256 encryption

• Audits and tracks encryption key usage

• Securely exchanges encrypted archives with affiliates without divulging internal keys