Monitoring the encryption of storage spaces
You can monitor whether storage space encryption is enabled and which storage spaces are encrypted.
About this task
To determine whether storage space encryption is enabled, run the oncheck -pr command. If storage space encryption is enabled, the output includes the following line, which identifies the encryption cipher:
Encryption-at-rest is enabled using cipher 'cipher'
If the root dbspace is encrypted, the output of the oncheck -pr command
contains the following line:
The ROOT Dbspace is encrypted
To see which storage spaces are encrypted, use one of the following methods:
- Run the onstat -d command. Position 6 of the
flags
field contains an E if the storage space is encrypted. - Query the sysdbspaces table in the sysmaster database. The is_encrypted column shows whether a storage space is encrypted.