Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Published by Scroll Versions from this space and version 17.6

Table of Contents

Overview

TDE keys perform encryption.

Without a

You cannot create a Smartpoint without a TDE key

, a Smartpoint can not be created

. You may add TDE keys to be used for encryption at any point in the Smartcrypt TDE Manager.

Image RemovedImage Added

 

Adding a TDE Key

Image Removed

Go to TDE > Keys to view the list of current registered TDE keys.

Click Add to display this screen:

Image Added

Name the Key, then use the drop-down menus to set the Key Rotation, Key Retirement and Key Destruction schedule for this key. The next sections describe these concepts.

Save your changes to add this key.

 

Key Rotation

Key Rotation is an aspect of the Smartcrypt TDE Enterprise Manager (SEM) that allows you to decide when a TDE key should no longer be used. Within When you click the drop-down menu, a number choose from the range of time frames appear ranging , from 1 month to 10 years. Once the TDE key reaches this age, a new TDE key is created and used. The previously used TDE key(s) will continue to be distributed along with the new TDE key until the old TDE key(s) is retired or destroyedreach the retirement or destruction date.

 

Key Retirement

The age selected in the Key Retirement drop-down menu dictates when a TDE key is no longer used for encryption or decryption. However, this TDE key can be pulled out of retirement by changing the age back to None or increasing the age for retirement.

 

Key Destruction

At the age selected in the drop-down menu, the TDE key is destroyed. This TDE key will never be able to be used again for decryption or encryption, so any file encrypted with this TDE key can not cannot be unlocked in the future.

** IMPORTANT: Key Destruction is permanent.

 

Team

By selecting a team within the drop down menu, you give the members of the team access to the TDE key. This means the team can decrypt any file encrypted with this specific TDE key as well as encrypt any file using the TDE key.

 

Editing a TDE Key

You may edit a TDE key at any point in the Smartcrypt TDE Managertime in SEM. Click Edit next to the key you want to change. You may adjust the age of key rotation, key retirement, and key destruction. The team which has permission to decrypt files with the TDE key and encrypt files with the same key may be changed as well.

 

Deleting a TDE Key

You may delete a TDE key at any point in the Smartcrypt TDE ManagerSEM. Click Delete next to the key you want to remove.

** IMPORTANT: Deleting a key has the same effects as key destruction. It is permanent. Any file encrypted with this TDE key can not cannot be decrypted in the future.