TMA-DB2-8.2.12
Retain All Master Keys
Açıklama
Master keys are needed to access the DEKs that are stored in encrypted databases, transaction logs, and backup images. Since multiple MKs can exist over the life time of these objects, it is necessary to retain them all while the encrypted data is retained. If a MK is lost, the encrypted data in the object cannot be retrieved. An organizations standard operating procedures (SOP) should have a ...
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.
Check the organization's SOP for specific instructions on tracking what data is encrypted with a particular master key, and that there are details on how to archive a master key for long term storage. Ensure the SOP clearly states master keys should never be deleted.
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
Update the SOP to provide guidance found missing during the audit.
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- db2databasemanual
- Referans
- CIS IBM Db2 12.1 Benchmark v1.0.0 - 8.2.12 Retain All Master Keys