Downloading the Pre-release Plugin

Procedure

1. Logging In to the Database Encryption System using the system administrator (sysadmin) account.
2. Click Project Management in the left navigation tree; the system will then display a list of all projects, as shown in Figure 1.
   Figure 1 Project management
   

3. View the project list; hover your mouse over the project that requires an integration plugin, then click Enter, as shown in Figure 2.
   Figure 2 Downloading the plugin
   

4. Click Enter to access the ERP project management interface, as shown in Figure 3.
   Figure 3 Managing selected project
   

   The right-side window in the above image displays key information for this project, such as an ERP project.

   • The red bounding box indicates the project currently being managed, e.g., ERP Project.
   • Data Statistics: Displays the currently managed projects; for example, the ERP Project involves one database, 11 tables, 89 fields, etc.
   • Left navigation bar: Refers to the capabilities provided for managing the current project (e.g., ERP), including:
     • Home Page: Refers to the project's homepage.
     • Discovery and Categorization: Refers to the identification of sensitive data within the current project.
     • Pre-Release: Verify in the testing environment whether the application supports all SQL statements; for any SQL statements not supported, save them to a file for subsequent evaluation.
     • Encryption Settings Management: Refers to managing the encryption of the current project.
     • Desensitization Strategy Management: Refers to the dynamic desensitization management of the current project.

5. Click Pre Release on the left side, as shown in Figure 4.
   Figure 4 Pre-release page
   

6. Click Download Pre-Release Plugin; the system will then display a pop-up window prompting you to configure environment variables (as shown in Figure 5). After clicking Confirm, you will be directed to the encryption plugin download interface.
   Figure 5 AKSK configuration prompt
   

7. The page will display the IP address, port, and project ID of the Transparent Encryption Gateway Platform; click Generate to generate the AppCode required by the plugin. After downloading the plugin via Application Integration, the plugin will retrieve the encryption/decryption rules configured for the fields from the corresponding project on this platform, as shown in Figure 6.
   Figure 6 Pre-release plugin information & download-1
   

   

   • The AK and SK displayed on the page are shown only once and cannot be retrieved later. After generating them, please copy them and save them to a file for future use.

   • For security reasons, SK is displayed with an asterisk (*). SK needs to save its plaintext; you can click the icon on the right side of the text box to display the plaintext, then copy and save it.

8. Click and select the menu item General Plugin from the pop-up menu to save the plugin locally for use within the business system; see Figure 7 for details. The parameter descriptions for the plugin download page are provided in Table 1. Generating and downloading the plugin may take some time; please wait for 1–2 minutes. The plugin will be downloaded to the default file download location specified by your browser.
   Figure 7 Pre-release plugin information & download-2
   

   Table 1 Download plugin page parameter guide

   Parameter	Description
   Encryption Gateway Platform	Displays the IP address and server port of the current encrypted gateway platform.
   Project ID	The unique identifier for this project, used for displaying and troubleshooting issues.
   AK	The system calculates the AppCode based on project information and built-in service algorithms; the user must then configure this value as an environment variable within the application environment where the plugin is integrated. The AK is displayed.
   SK	The system calculates the AppCode based on project information and built-in service algorithms; the user must then configure this value as an environment variable within the application environment where the plugin is integrated. By default, this setting is hidden; clicking on it will display it.

The downloaded plugin is a ZIP archive (plugins.zip); the files contained within this archive are shown in Figure 8.

Figure 8 Downloaded files list

The 'encryption-proxy.jar' file is the encryption/decryption plugin package, while 'bcprov-jdk18on-1.79.jar' is the encryption/decryption dependency package. To protect intellectual property rights, the encrypted plugin package has been encrypted; the 'sjt_agent.jar' file is the package used to decrypt this encrypted Jar file.