Creating a Key

Procedure

1. Logging In to the Database Encryption System using the system administrator (sysadmin) account.
2. Select Rule Management > Encryption Rule from the left-side navigation tree; the system then creates default encryption rules for the built-in algorithms, as shown in Figure 1.
   Figure 1 Encryption rules page
   

3. If you are using the system's built-in encryption rules, you can skip this step.

   If you need to create your own encryption rule, click Add Encryption Rule, then fill in the information on the Add Encryption Rule page to create an encryption category. The Add Encryption Rule page is shown in Figure 2; the parameter descriptions for adding an encryption rule are provided in Table 1.

   Figure 2 Adding an encryption rule
   

   Table 1 New encryption rule parameter documentation

   Parameter	Description
   Encryption Rule Name	You can enter a custom rule name as needed. Recommended naming convention: Named after the algorithm. For example: SM4 The name combines an algorithm with an encryption mode; e.g., SM4_GCM.
   Encryption Algorithm and Mode	Select the supported encryption method from the dropdown menu. In compliance with China's national cryptographic standards and security requirements, the system defaults to providing the SM4_GCM algorithm as well as the SM4 algorithm operating in GCM mode.

4. Click on the right side of the already created encrypted category to open the Add Key page, as shown in Figure 3.
   Figure 3 Creating an encryption rule
   

5. On the pop-up page, enter the key name and then click Confirm. The parameters for adding a new key are shown in Table 2.

   Table 2 Key configuration parameters explanation

   Parameter	Description
   Secret Key Name	Custom string – fill in according to business requirements, e.g.: ERP encryption key.
   Encryption Algorithm	The algorithm mode for the current key – read-only, non-modifiable.

6. After saving, view the results; the final display is shown in Figure 4.
   Figure 4 Viewing the key