CA XCOM Data Transport r11.5 Enhanced Features › Encryption at Rest

Encryption at Rest

CA XCOM Data Transport currently provides the ability to encrypt data during transmission (SSL). However, when the data reaches the receiving CA XCOM Data Transport system the resulting file is written in plain text. This release provides encryption at rest, which works as follows:

• The local CA XCOM Data Transport system reads an encrypted input file, decrypts the file, and transfers the data to the partner.
• The remote CA XCOM Data Transport system receives a data transfer and writes the output file as an encrypted file.

The following new local/remote pairs of parameters have been added for encryption at rest:

• LEAR_CIPHER/EAR_CIPHER—Indicates which encryption algorithm is to be used.
• LEAR_DIGEST/EAR_DIGEST—Indicates the digest value to be matched with the generated digest. You must have already generated a digest value on the input file.
• LEAR_HASH/EAR_HASH—Indicates which digest algorithm is to be used.
• LEAR_KEY/EAR_KEY—Indicates the symmetric encryption key to be used to encrypt/decrypt.

For more information about these parameters, see the CA XCOM Data Transport for UNIX and Linux) User Guide.