Database utilities for administering dynamic data masking
- Last Updated: February 11, 2026
- 2 minute read
- OpenEdge
- Version 13.0
- Documentation
The following PROUTIL utilities manage dynamic masking of the data in the OpenEdge database.
Enable DDM
You need to enable the DDM feature before configuring and using it. Enabling DDM simply checks if the database is licensed for DDM.
- Clients earlier than OpenEdge 12.8 that are not aware of the DDM setup may not be able to open or connect to the database.
- You need to activate DDM to configure it because DDM is inactive, by default.
Activate DDM
Before activating DDM, you must enable the database for DDM and configure the authorization tags, user-defined roles, and fields you want to mask in the database. When you activate a database for DDM, all connected clients must honor the masking rules that have been set up. For more information about how to activate DDM, see PROUTIL ACTIVATEDDM qualifier.
Deactivate DDM
Deactivating DDM on a database turns off the DDM capability, but it does not remove the existing masking rules. All connected clients ignore the masking rules that have been set up. For more information about how to deactivate DDM, see PROUTIL DEACTIVATEDDM qualifier.
Disable DDM
Before disabling DDM, make sure that the database is in the DDM-enabled state, and you have removed the defined masks and authorization tags from the database otherwise DISABLEDDM exits with an error. The database is returned to its condition prior to DDM enablement. Clients earlier than OpenEdge 12.8 that do not support DDM can now access and open the database. For more information about how to disable DDM, see PROUTIL DISABLEDDM qualifier.