Red Hat NETSCAPE ENTREPRISE SERVER 6.0 - INSTALLATION AND MIGRATION GUIDE Instalační příručka stáhnout pdf (Strana 123)

See also

•

Downgrading from Adaptive Server 15.7 ESD #2

on page 106

Downgrading an Adaptive Server That Uses Encryption

Downgrade an Adaptive Server versions 15.7 and later if you enabled 256-bit key encryption

keys.

Set the downgrade_kek_size configuration option to true. This means you must change

the key encryption key size to 128 bits.

Run

sp_downgrade

to find all column encryption keys (CEKs) and key copies that are

protected by master keys or by dual control.

Drop dual control for each CEK:

alter encryption key keyname

[with passwd password

modify encryption

with no dual_control

Use

drop encryption key

to drop user and login password-protected key copies.

Create a system encryption password for each database that has master keys:

sp_encryption system_encr_passwd, <password>

Reencrypt each CEK with the master key:

alter encryption key keyname

with passwd master key

modify encryption

with passwd system_encr_passwd

Note: The key owner must perform the reencryption for each CEK, or else the key

ownership changes.

Reencrypt all base keys that are protected by user passwords:

alter encryption key keyname

with passwd old_password

modify encryption

with passwd new_passwd

Note: The key owner must perform the reencryption for each base key; otherwise, the key

ownership changes.

CHAPTER 11: Adaptive Server Downgrades

Installation Guide 113

1 2 ... 118 119 120 121 122 123 124 125 126 127 128 ... 157 158

Žádné komentáře

Red Hat NETSCAPE ENTREPRISE SERVER 6.0 - INSTALLATION AND MIGRATION GUIDE Instalační příručka Strana 123