Does NuGenesis SDMS use any encryption algorithms during the file archive process? - WKB47607

ENVIRONMENT

• NuGenesis 9 SDMS
• NuGenesis 8 SDMS

ANSWER

For the Archive Agent part of the process: No, the AA does not encrypt the files. When it processes files for capture, it uses a file compression algorithm to reduce the file sizes, but this algorithm is not intended for encryption. The compressed files could be de-compressed easily without any secret keys; in contrast, an encryption algorithm would require a secret key in order to de-crypt an encrypted file.

For the Transport Engine: The TE encrypts the files in transit only if the destination is an SDMS project with Managed Storage and the storage location is defined with FTPS. The TE will use SSL or TLS to encrypt the connections between it and the FTPS server. If the destination of the file is a Managed Storage location defined with FTP, the TE will not encrypt the files in transit. If the destination of the file is a project that uses Database storage, data transfer will be via ODBC. Whether encryption in transit is used depends on the SDMS version:

• NuGenesis 9: uses TNS encryption by default
• NuGenesis 8: does NOT use TNS encryption

For the Data Management module: The DM downloads files from SDMS to a temporary folder in order to verify that the files stored in SDMS are true and complete copies of the original files. As with the Transport Engine, if the project uses Managed Storage and FTPS, the download of files to the temporary folder will be encrypted; if the project is Managed Storage and FTP, the transfer will NOT be encrypted; if it is a Database project, the answer depends on the NuGenesis version.

ADDITIONAL INFORMATION

Oracle Table Encryption is not supported for use in NuGenesis 8 or 9 databases.

Files at rest in a Managed Storage site could be encrypted with volume-level encryption if the encryption is completely transparent to the FTP server. Volume-level encryption has not been tested for use with NuGenesis.

In NuGenesis 9, both the Oracle database and the SDMS Oracle Client use encrypted TNS connections by default. NuGenesis 8 does NOT use encrypted TNS connections.