Built-ins for Encryption at Rest

These functions will work with both the internal PKCS #11 secured wallet, or an external KMIP-compliant keystore. Using these functions, you can encrypt data and check the status of encryption in your clusters using either JavaScript or XQuery.

These are the Server-Side JavaScript built-ins:

• xdmp.keystoreExport

• xdmp.keystoreImport

• xdmp.filesystemFileEncryptionStatus

• xdmp.databaseEncryptionAtRest

• xdmp.databaseEncryptionKeyId

• xdmp.keystoreValidateExported

These are the Server-Side XQuery built-ins:

• xdmp:keystore-export

• xdmp:keystore-import

• xdmp:filesystem-file-encryption-status

• xdmp:database-encryption-at-rest

• xdmp:database-encryption-key-id

• xdmp:keystore-validate-exported