Help Center/ Database Security Service/ User Guide/ Database Encryption/ Series 2/ Configuring System Functions and Usage Scenarios/ Scenario 3: Overview of the Decryption Function and Configuration Process
Updated on 2026-07-07 GMT+08:00
View PDF
Share

Scenario 3: Overview of the Decryption Function and Configuration Process

Overview

Among the various stages of data management, data decryption is a critical step. It enables encrypted data-originally intended for security purposes-to be restored to its original, readable format for user utilization under specific circumstances. This section provides a concise overview of the data decryption process.

Application scenarios

  1. Data Sharing: When sharing data with external partners or third-party organizations, the decryption feature converts encrypted data to plaintext for secure sharing and transmission.
  2. Data Analysis: Before conducting data analysis and report generation, encrypted data must be restored to its original format for processing and interpretation by analytical tools.
  3. Compliance Audit and Review: To meet legal and regulatory requirements or internal audit processes, access to decrypted data may sometimes be required for compliance checks.
  4. Disaster Recovery: In the event of system failure or data corruption, decryption is a critical step in the data recovery process, ensuring business continuity.
  5. User Access: For certain reasons (such as permission changes or policy adjustments), users may no longer require encrypted data. In such cases, the decryption feature can restore the data to plaintext for user use.

Prerequisite

  • Whether the encryption system can be accessed and used normally.
  • The target database is accessible and usable.
  • Ensure proper hardware functionality: including network connectivity and disk space.

Configuration Execution

  1. Logging In to the Database Encryption System as the security administrator secadmin.
  2. Select the project to be decrypted and click Enter to access the project.
  3. In the left navigation tree, choose Management > Encryption Policy Setting, select the table to be decrypted, switch to the Field Encryption Configuration tab, select the field to be decrypted, and click Decrypt in the Operation column.

    Figure 1 Execute data decryption

  4. After decryption, the target field is restored to plaintext.

    Figure 2 Browse the decrypted data

Other Notes

  1. After decryption is completed, the encryption plugin and encryption agent automatically identify the plaintext data and no longer perform encryption or decryption, ensuring uninterrupted system usage for users.
  2. Use relevant buttons such as batch operations to improve execution efficiency.
  3. For detailed steps, refer to the Encryption Policy Settings.
Parent Topic: Configuring System Functions and Usage Scenarios