Previous Topic: View the Status of Cache Refresh RequestsNext Topic: Configure Custom Locales

CA Strong Authentication Administration Guide › Getting Started › Configuring Administration Console Settings › Configure Attribute Encryption

Configure Attribute Encryption

CA AuthMinder stores the user-related data in plain format in the database tables that you seed during installation by default.

Note: To encrypt the data, you use the Attribute Encryption Set Configuration page and select the user attributes that you want to encrypt. See Multi-Byte Characters and Encrypted Parameters for the list of attributes that can be stored in an encrypted format.

Follow these steps:

  1. Activate the Services and Server Configurations tab.
  2. Click the Administration Console option on the submenu of the tab.

    Under the System Configuration section on the side-bar menu, click the Attribute Encryption Configuration link to display the page.

    Note: If you choose to encrypt the User Identifier attribute, all the following attributes that help in uniquely identifying the user are also encrypted:

  3. In the Select Attribute(s) for Encryption section, select the attributes that you want to encrypt from the Available Attributes for encryption list to the Attributes Selected for encryption list.

    Click the > button to move selected attributes to the desired list. You can also click the >> button to move all attributes to the desired lists.

    Note: Hold the Ctrl key to select more than one attribute at a time.

    The Attributes Selected for encryption list displays all the attributes that will be stored in an encrypted format.

  4. In the Data Masking Configuration section, specify the parameters that are described in the following table:
    Type

    Select an option from the drop-down list to Mask or Unmask the attributes configured for encryption.

    Start Length

    The number of characters to be masked or unmasked from the start of the actual data string.

    End Length

    The number of characters to be masked or unmasked from the end of the actual data string.

    Masking Character

    The character that will be used to mask (hide) the actual data.

    For example, if you want to mask a user name that has been configured for encryption, and the Start Length, End Length, and Masking Character are 2, 2, and x, then the user name "mparker" is masked as "xxarkxx", and vice-versa for unmasking.

  5. Click Save to save the changes that you have made.
  6. Refresh all deployed CA AuthMinder Server instances. See Refresh the Cache for instructions on how to refresh the system cache.