How to encrypt a column via process

I suggest reading the documentation. You need to set the encrypted flag at your custom column.

Markus,

For some reasons, lots of columns are greyed out and could not be selected. Is this behavior somehow due to underline sentence? 

"Encryption is carried out by the program "Crypto Configuration". With this program an encryption file is created and the contents of the database columns that are effected are converted. The encrypted data is stored in the database table DialogDatabase.".

Is it possible to enable Encrypted option on other columns (included in that encryption file) except OOTB columns? Thank you for the help!

Ruchita,

As Markus suggested .... please please please look at the documentation.  Pretty much any column can be encrypted.  Designer > One Identity Manager Schema > <your> table> > <your column> > More > Check encrypted > Commit.

HTH, Barry.

Just a guess, are the columns you are trying to encrypt non-string columns?

That was what I thought the same to Markus and Barry explanations. As long as OIM database encrypted then most of columns should have the option to enable Encrypted.

But I was told that most of columns greyed out (v8.0.1 environment). Is there anything else that could be missing? Thanks!

I would ask for a proof of that statement. They should be at least able to provide some screenshots for further explanation.

Yes, need the evidence for that. Last question - Are data written into OIM logs in the encrypted fashion by OOTB when OIM DB encrypted, correct?

Many thanks!

Yes they are if they appear at all. 

I tried encrypting String columns but it is not allowing to do so. Error message thrown is "Encryption can only be enabled for text columns with a minimum length of 178"

Hi, please suggest how to encrypt column value and store encrypted value in database

Hi,

See Markus Weiss-Ehlers post on this thread from 5 months ago ...... you simply mark the column as encrypted ...... but of course the database itself has to be set up for encryption.  Please refer to the documentation here

HTH, Barry.

need clarification on database encryption. When we encrypt the database using Crypto Configuration, does it encrypt whole database or does it encrypt only those columns which are marked "encrypted"? Because if it encrypts whole database then what is the need of marking these columns "encrypted"?

need clarification on database encryption. When we encrypt the database using Crypto Configuration, does it encrypt whole database or does it encrypt only those columns which are marked "encrypted"? Because if it encrypts whole database then what is the need of marking these columns "encrypted"?

Only those columns marked as encrypted are encrypted.

ok and DialogUserPassword is always encrypted even if we dont encrypt database but CentralPassword is not encrypted by default. Is this understanding correct?

Your assumption is wrong.

The passwords use for authentication (Person.DialogUserPassword, DialogUser.Password, ...) are stored as hash only. They are not encrypted.