Encrypted or Masked Dsource database copy

  • 0
  • 1
  • Question
  • Updated 3 years ago
  • Answered
I have a production database that is under a regulatory compliance that if the data is exported outside of the production host, it has to be masked or encrypted. So when I create a dsource out of my production database, is there a way to encrypt or mask the dsource database copy?


Charles Theophilus
Photo of Charles Theophilus

Charles Theophilus

  • 524 Points 500 badge 2x thumb

Posted 3 years ago

  • 0
  • 1
Photo of Michael Brown

Michael Brown

  • 1,540 Points 1k badge 2x thumb
Official Response

This is a very common requirement, for which there are several solutions.

First, is the production database encrypted at rest? If so, the dSource and any VDBs created from it will also be encrypted. 

If the source data is not encrypted, the next consideration is whether the regulations allow for unencrypted, unmasked data to be exported to another host / storage device in the production zone. If that is possible, we could still link the dSource, then provision a VDB from it, which you could then either mask it using Delphix Agile Masking, or encrypt it. A second Delphix Engine outside the production zone could then link this VDB as a dSource in order to provision to your lower environments.

Lastly, if the data can't be exported to another host in the same production zone without it being encrypted or masked, it may be possible to provision an empty VDB and use on-the-fly masking to mask the data from the source DB as it is moved into the empty VDB. This is a more complex solution, obviously.

Thank you,