Creating protection policy

a. Add General Info

b. Configure Settings

c. Select Key

d. Select Character Set

f. Select Masking Format

e. Select Access Policy

g. Confirmation

Add General Info

1. Specify a unique Name for the protection policy.

2. Add a description for protection policy.

3. Click Next to go to the Settings screen.

Configure Settings

1. On the Settings screen, configure the following fields.

   Field	Description
   Algorithm	Algorithm to be used in the cryptographic operations. You can view the list supported algorithms here.
   Tweak Algorithm	Tweak algorithm to be used in cryptographic operations. It is only applicable for FPE algorithms. Possible options are: — SHA1 — SHA256 — NONE — NULL For FF3 variants, Tweak Algorithm can't be NULL. For the remaining FPE algorithms, Tweak Algorithm can be NULL.
   Tweak	Tweak data to be used in cryptographic operations. This field is mandatory if tweak algorithm is specified. — If tweak algorithm is NONE, specify a 16-character HEX encoded string. — If tweak algorithm is NULL, this field is not required.
   IV	Initialization vector to be used in cryptographic operations. This field will appear on the UI if FPE/AES algorithm is selected. For FPE/AES, IV is derived based on the character set length. To know how to calculate the required IV, click here.
   Prefix	Specify a user friendly name to help user identify the type of data being protected. The maximum allowed length for prefix is 7 characters and only All Printable ASCII characters are allowed.
   Disable Versioning	If selected, protection policy can't be updated and only ciphertext is returned in the response.
   Version Header	Determines the location of version bytes. Possible options are: — Internal: version bytes are prepended to the ciphertext. — External: version bytes are stored in a separate field. For details, click here.

2. Click Next to go to the Select Key screen.

Select Key

1. Select the key form the available options. If the desired key is not found, click Create Key.

2. Click Next to go to the Select Character Set or Select Access Policy screen.

Select Character Set

1. Select the character set form the available options or click Create Character Set. Refer to Creating Character Sets for details.

2. Click Next to go to the Select Access Policy or Select Masking Format screen.

Select Masking Format

1. Select the Masking Format to be associated with the protection policy form the available options or click Create Masking Format. For more details, click here.

2. Click Next to go to Select Access Policy screen.

Select Access Policy

1. Select the Access Policy form the available options or click Create Access Policy. Refer to Managing Access Policy for details.

2. Click Next to go to the Confirmation screen.

Review

1. Verify the protection policy details. The Confirmation screen displays general details, settings, key, character set, masking format, and access policy.

2. If you want to modify any field, click Edit and update the details.

3. Click Create. A message, Your protection policy is successfully created. Close the wizard to return to the protection policies page. is displayed on the screen.

4. Click Close to exit the setup.

a. Add General Info

b. Configure Settings

c. Select Key

d. Select Character Set

f. Select Masking Format

e. Select Access Policy

g. Confirmation

Add General Info

1. Specify a unique Name for the protection policy.

2. Add a description for protection policy.

3. Click Next to go to the Settings screen.

Configure Settings

1. On the Settings screen, configure the following fields.

   Field	Description
   Algorithm	Algorithm to be used in the cryptographic operations. You can view the list supported algorithms here.
   IV	Initialization vector to be used in cryptographic operations. This field will appear on the UI if AES/CBC algorithm is selected. For AES/CBC modes, a 16-byte IV is required. The value must be a HEX encoded string.
   Prefix	Specify a user friendly name to help user identify the type of data being protected. The maximum allowed length for prefix is 7 characters and only All Printable ASCII characters are allowed.
   Disable Versioning	If selected, protection policy can't be updated and only ciphertext is returned in the response.
   Version Header	Determines the location of version bytes. Possible options are: — Internal: version bytes are prepended to the ciphertext. — External: version bytes are stored in a separate field. For details, click here.

2. Click Next to go to the Select Key screen.

Select Key

1. Select the key form the available options. If the desired key is not found, click Create Key.

2. Click Next to go to the Select Character Set or Select Access Policy screen.

Select Access Policy

1. Select the Access Policy form the available options or click Create Access Policy. Refer to Managing Access Policy for details.

2. Click Next to go to the Confirmation screen.

Review

1. Verify the protection policy details. The Confirmation screen displays general details, settings, key, and access policy.

2. If you want to modify any field, click Edit and update the details.

3. Click Create. A message, Your protection policy is successfully created. Close the wizard to return to the protection policies page. is displayed on the screen.

4. Click Close to exit the setup.