Help Center/ Database Security Service/ User Guide/ Database Encryption/ Series 2/ System Administrator Operation Guide/ Project Management/ Entering the Project/ Encryption Policy Settings
Updated on 2026-07-07 GMT+08:00
View PDF
Share

Encryption Policy Settings

Viewing Basic Information

  1. Logging In to the Database Encryption System using the system administrator sysadmin account.
  2. Select Project Management in the left navigation tree.
  3. Select the desired project and enter the project.
  4. In the left navigation tree, select Encryption Settings Management > Encryption Policy Settings.
  5. On this page, you can view the encryption overview of the project (including the encryption and decryption status of the database table columns, whether plugins are enabled, etc.).

    Figure 1 Encryption setting strategy

  6. Select the table to encrypt, then click Field Encryption Configuration to view the current encryption settings.

    Figure 2 Viewing encrypted fields

  7. Select the table to encrypt, then click Data Structure to view its current structure information.

    Figure 3 Viewing table structure information

Field Encryption Configuration

  1. After entering the encryption policy configuration page, select the desired table and click the Edit button.

    Figure 4 Editing encryption policy

  2. In the pop-up window, select the required key and configure encryption length, truncation, support for fuzzy queries, and other settings.

    Figure 5 Selecting an encryption algorithm
    Table 1 Table1 Parameter explanation for encryption algorithm selection page

    Parameter

    Description

    Select Encryption Rule

    Select a pre-configured encryption algorithm category.

    Select Encryption Key

    Select the specified key under the corresponding algorithm.

    Encryption Position

    Based on business requirements, select the position and number of characters in the encrypted string to retain in plaintext.

    Source Length

    Enter the required source length for the encrypted field based on actual needs; you can use the default length or reduce the length to improve performance.

    Supports Fuzzy

    When checked, encrypted data supports fuzzy queries, but the ciphertext length will occupy more bits.

    Reset Rule

    Delete all key configurations in the current field.

    Confirm Rules

    Save the key configuration for the current field.

  3. After setting the rules, return to the encryption policy settings page to check if the key is configured and active. You can save the configuration.
  4. Click Encrypt in the Operation column to perform encryption.

    Figure 6 Save encryption rules

Encrypt the Field Value

  1. After configuring the key, users can perform field encryption (click the Encrypt button).
  2. During encryption, you can click the Details button to view the encryption progress and service execution logs.

    Figure 7 Checking encryption progress

  3. After encryption is complete, users can view the database and confirm that the plaintext data has been encrypted.

    Figure 8 Viewing data encryption results

Decrypt Field Value

  1. For fields that have been encrypted successfully, click the Decrypt button to decrypt the data.
  2. After decryption is complete, you can view the database, with all corresponding data decrypted into plaintext.
  • Generate extra columns: After encryption, the system creates a column named original_field_name+_copy in the table for data backup, auditing, and other operations.
  • Delete extra columns: Before decryption, the user must manually click the Delete other columns button to perform the deletion.
  • Field key configuration: The encryption system currently supports encryption of mainstream string-type data; keys cannot be set or encryption/decryption performed for other data types (e.g., dates and numbers).
Parent Topic: Entering the Project