Configuring a Device Management Policy

How It Works

Figure 1 shows how a policy is deployed on a device.

Figure 1 Policy deployment process

Database Types and Versions That Support Database Encryption

Notes and Constraints

• Different data sources require different proxy ports. The same data source must use the same proxy port.
• A table cannot be encrypted twice consecutively. A decryption policy must be available between two consecutive encryptions. After the table is decrypted, it can be encrypted again.
• When creating a decryption policy, you cannot select columns. The columns are automatically filled based on the selected encryption policy.

Prerequisites

You have added a device, and the Huawei agent plug-in is running on the third-party device.

Creating a Policy

1. Log in to the DSC console.
2. Click in the upper left corner and select a region or project.
3. Choose Third-Party Device Management > Policy Management. The Policy Management page is displayed.
4. Click Create Policy in the upper left corner. The Create Policy page is displayed.
5. Select a policy type and configure policy information.
   • Database encryption: Encrypt data to ensure data confidentiality and integrity and prevent unauthorized access and data leakage.
     1. Click Start configuring. The page for configuring a database encryption policy is displayed.
     2. Set the parameters by referring to Table 1.

        Table 1 Parameters for configuring a database encryption policy

        Parameter	Description
        Policy Name	Enter a policy name. The name can contain only letters, digits, underscores (_), and hyphens (-).
        Encryption	Select this option.
        Associated Device	Select an associated device from the drop-down list box.
        Data Source	Select the target data source from the drop-down list. For details about the supported database versions, see Database Types and Versions That Support Database Encryption.
        Proxy Port	The port numbers range from 14000 to 14999. Different database instances (sharing the same address and port) utilize distinct proxy ports. A single database instance consistently uses the same proxy port. When a data source for the same database instance is added, the proxy port is automatically populated.
        Encryption Algorithm	Select an encryption algorithm from the drop-down list box. The options are AES128 and SM4.
        Encrypted Table	Select an encrypted table from the drop-down list. The same target table cannot be selected repeatedly.
        Table Information	Information about the encrypted table, including Field Name, Field Type, and Data Level.

     3. Click Save and Deliver. The policy list is displayed. The Status of the created policy is Enabled (Delivering). If the Status of the policy turns to Enabled (Delivered), the policy is created successfully.
   • Static database masking: Mask sensitive data to ensure privacy and security while retaining the data structure and statistics features.
     

     Sensitive data must be identified before masking.

     1. Click Start configuring. The page for configuring a static database masking policy is displayed.
     2. Set the parameters by referring to Table 1.

        Table 2 Static database masking policy parameters

        Parameter	Description
        Policy Name	Enter a policy name. The name can contain only letters, digits, underscores (_), and hyphens (-).
        Associated Device	Select an associated device from the drop-down list box.
        Original Data Source	Select the data source to be masked from the drop-down list.
        Data Source	Select the location for storing the masked data.
        Policy Details	Whether to rebuild the table: If this switch is turned on, the table will be rebuilt. Whether to clear the target table: After this function is enabled, the target table is cleared. Whether to skip dirty data: If this function is enabled, dirty data in the table is skipped.
        Extraction method	Extract All: Extract all data from the table. Extract by Percentage: Extract data based on the specified percentage, which ranges from 1 to 100. Extract by Row: Extract data based on the entered number of rows, which ranges from 100 to 10000.
        Table	Select a maximum of 10 tables from the drop-down list.
        Table Information	This parameter is displayed after you select a table. Table information, including Field Name, Field Type, Data Level, and Masking Algorithm. Select a masking algorithm from the Masking Algorithm drop-down list. You can also select No masking. Migration only: If this option is enabled, the selected columns are migrated without masking.

     3. Click Save and Deliver. The policy list is displayed. The Status of the created policy is Enabled (Delivering). If the Status of the policy turns to Enabled (Delivered), the policy is created successfully.
   • Dynamic database masking: Mask sensitive data in real time to ensure that unauthorized data cannot be accessed.
     1. Click Start configuring. The page for configuring a dynamic database masking policy is displayed.
     2. Set the parameters by referring to Table 3.

        Table 3 Dynamic database masking policy parameters

        Parameter	Description
        Policy Name	Enter a policy name. The name can contain only letters, digits, underscores (_), and hyphens (-).
        Associated Device	Select an associated device from the drop-down list box.
        Data Source	Select a data source from the drop-down list box.
        Masking Service Port	The port numbers range from 14000 to 14999. Different database instances (sharing the same address and port) utilize distinct proxy ports. A single database instance consistently uses the same proxy port. When a data source for the same database instance is added, the proxy port is automatically populated.
        Table	Select a table from the drop-down list.
        Table Information	This parameter is displayed after you select a table. Table information, including Field Name, Field Type, Data Level, and Masking Algorithm. Select a masking algorithm from the Masking Algorithm drop-down list.

     3. Click Save and Deliver. The policy list is displayed. The Status of the created policy is Enabled (Delivering). If the Status of the policy turns to Enabled (Delivered), the policy is created successfully.

Related Operations

• Disabling a policy: You can click Disable in the Operation column to disable a policy that has been applied. After the policy is disabled, the Status will be changed to Disable (Delivering).
• Deleting a policy: You can click Delete in the Operation column to delete a policy.