ENCRYPT_CDR Configuration Parameter

Use the ENCRYPT_CDR configuration parameter to set the level of encryption for Enterprise Replication.

onconfig.std value

ENCRYPT_CDR 0

values

0 = Default. Do not encrypt.

1 = Encrypt when possible. Encryption is used for Enterprise Replication transactions only when the database server being connected to also supports encryption.

2 = Always encrypt. Only connections to encrypted database servers are allowed.

takes effect

After you edit your onconfig file and restart the database server.

After you run the cdr change onconfig command.

Usage

If you enable encryption with the ENCRYPT_CDR configuration parameter, you must also set the ENCRYPT_MAC, ENCRYPT_MACFILE, ENCRYPT_SWITCH, and ENCRYPT_CIPHERS configuration parameter to configure encryption.

If you use both encryption and compression (by setting the CDR_NIFCOMPRESS configuration parameter), then compression occurs before encryption.

Note:

From 2.0.0.0 onwards, Enterprise Replication uses SMX connection for communicating with peer servers and ENCRYPT_SMX or onsocssl shall be used to enable encryption. For communicating with server versions prior to 2.0.0.0, Enterprise Replication still requires configuring ENCRYPT_CDR.