Updated on 2026-09-24 GMT+08:00

Adding an Encryption Rule

Before encrypting the system configuration, you must first configure the encryption rules and encryption keys.

Procedure

  1. Logging In to the Database Encryption System using the system administrator (sysadmin) account .
  2. Select Rule Management > Encryption Rule from the left navigation tree; the system then creates default encryption rules for the built-in algorithms, as shown in Figure 1.

    Figure 1 Encryption rules

  3. If you are using the system's built-in encryption rules, you can skip this step.

    If you need to create your own encryption rule, click Add Encryption Rule, then fill in the information on the Add Encryption Rule page to create an encryption category. The Add Encryption Rule page is shown in Figure 2; the parameter descriptions for adding an encryption rule are provided in Table 1.

    Figure 2 Adding an encryption rule
    Table 1 Adding an encryption rule

    Parameter

    Description

    Encryption Rule Name

    You can enter a custom rule name as needed.

    Recommended naming convention:

    • Named after the algorithm. For example: SM4
    • The name combines an algorithm with an encryption mode; e.g., SM4GCM.

    Encryption Algorithm and Mode

    Select the supported encryption method from the dropdown menu.

    In compliance with China's national cryptographic standards and security requirements, the system defaults to providing the SM4_GCM algorithm as well as the SM4 algorithm operating in GCM mode.