Check for TDE encryption
- Last Updated: July 3, 2024
- 1 minute read
- OpenEdge
- Version 12.8
- Documentation
Your system may be connected to an HSM, but if the database is not already enabled for TDE encryption, you cannot use HSM for a second layer of TDE authentication. You can use the HSMVALIDATE utility to check encryption on your database.
Use the PROUTIL HSMVALIDATE utility to verify encryption. For example, check access for a database named testdb1, as follows:
proutil testdb1 -C hsmvalidate
You see the output the following output if your system is ready for HSM support:
OpenEdge Release 12 as of Tue Jan 18 18:30:54 EDT 2021
hsmvalidate: hsm support has not been enabled for this database.
OpenEdge database HSM integration validation failed.
If you are the DBA, this message means that you should consult your HSM administrator to get an HSM slot (and label, if needed) for your database. See Get HSM connection information.
If the HSMVALIDATE utility returns the following, TDE is not yet enabled:
OpenEdge Release 12 as of Tue Jan 18 18:30:54 EDT 2021
hsmvalidate: Encryption must be enabled for database testdb1
OpenEdge database HSM integration validation failed.
To enable encryption, see Enable encryption.
Once you enable TDE encryption, run HSMVALIDATE again to verify readiness for HSM authentication.
For details about HSMVALIDATE syntax, see PROUTIL HSMVALIDATE qualifier.