• State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 94 subscribers
  • Views 2390 views
  • Users 0 members are here
Options
Related
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Exptected effects of database encryption on performance

christian.witte
over 5 years ago

Is there a rough estimate available on how much performance suffers when enabling database encryption?

How much would performance of the IT Shop suffer if personal data of employees was to be encrypted? How much longer would SAP HR imports take (they take a few hours anyway)?

  • 0 over 5 years ago

    Hi Christian,

    when enabling encryption by using the "Crypto Configuration" (CryptoConfig) program, only database fields marked for encryption are encrypted. By default those are password fields and password related fields like ADSAccount.UserPassword or DialogDatabase.ConnectionString. Those fields are supposed to be decrypted only by the JobService. By default ITShop, Webportal and fat clients are unable to decrypt encrypted data. This feature is not supposed to encrypt fields like Firstnam, Lastname, Birthdate, ...
    I doubt ITShop stuff or SAP HR imports are writing password (related) fields on a regular base in sizable amounts. Under this assumption, the effect should be negligible.
    See also support.oneidentity.com/.../9

    If you want to encrypt all personal data, you need to look at database server features. They are usually called "Transparent Data Encryption". Unfortunately I can't give advice in this case.

    Regards