Help Center/ Database Security Service/ User Guide/ Database Encryption/ Series 2/ System Administrator Operation Guide/ Database Encryption/ Linking Discovery Results to Encryption Settings
Updated on 2026-09-24 GMT+08:00
View PDF
Share

Linking Discovery Results to Encryption Settings

The "Link Discovery Results to Encryption Settings" feature links the results of sensitive data discovery/verification to the encryption settings for the respective fields; that is, sensitive data encryption is automatically configured based on the discovery results of sensitive data, as shown in Figure 1.

This will significantly reduce the workload associated with configuring encrypted fields one by one, while also preventing omissions or incorrect configurations.

Figure 1 The discovery results are linked to the encryption settings.

The specific operations for the database encryption system are as follows:

  1. The results of a sensitive data discovery or confirmation task are saved as a version—e.g., Version A.
  2. Automatically map the saved discovery result version to the encryption configuration. For example: Map Version A to the encryption configuration.

Prerequisite

Sensitive data discovery and verification have been configured and executed; for detailed instructions, please refer to the Sensitive Data Discovery section.

The Discovery Results are Linked to the Encryption settings.

  1. Navigate to the Discovery Results page for sensitive data, as shown in Figure 2.

    Figure 2 Sensitive data discovery/verification result

  2. Click Save; the system will display a Save Version dialog box, as shown in Figure 3; the parameter descriptions are provided in Table 1.

    Figure 3 Saving a version
    Table 1 Discovery result parameters explanation

    Parameter

    Description

    Historical Version

    Saved "historical versions".

    Save version

    For the version you wish to save, enter a clear and easily recognizable name.

  3. Click Save. The system adds a new version, "Version A", as shown in Figure 4.

    Figure 4 After adding a new save version

  4. Close this window; the system already contains the version we have saved.
  5. Log in to the ERP system, select Encryption Settings Management, then select Encryption Policy Settings, next select Asset Database, and finally select Batch Configuration to access the interface shown in Figure 5.

    Figure 5 Configuring encryption policies in batches

  6. Select a previously saved discovery result version and configure the encryption Strategy in batch. As shown in Figure 6, select the discovery task and its corresponding saved version from the Discovery Task Version dropdown menu.

    Figure 6 Configuring encryption policies in batches

  7. Click Batch Configuration; at this point, all confirmed and saved sensitive field results will be automatically applied to the table field encryption settings.
  8. Subsequently, existing historical data must also be encrypted.

    There are numerous methods for handling existing historical data; depending on the specific circumstances, please refer to:

  9. Downloading the Plugin.
  10. Rule Management.
Parent Topic: Database Encryption