Using CTE with a MongoDB Database

This document describes how to integrate CTE with a MongoDB database.

Test Environment

• CTE Agent: 7.2.0 and 7.3.0

• CipherTrust Manager: 2.8.0, 2.9.0, and 2.10.0

• OS: RHEL 7.9, Ubuntu 20.04, and Ubuntu 18

• MongoDB version: 3.6.8 or a subsequent version

• File System: XFS and EXT4, and NFS

Steps

To integrate CTE with a MongoDB database, install and register the CTE Agent and create appropriate GuardPoints.

Install and Register the CTE Agent

1. Install the CTE Agent on the client machine where the MongoDB database is installed and configured.

2. Register the CTE Agent with the CipherTrust Manager.

Refer to CTE - Agent Quick Start Guide for details.

Create the GuardPoints

Perform the following steps on the CTE client.

1. On the CTE client, stop the MongoDB database.

2. On the CipherTrust Manager, create a GuardPoint. While creating the GuardPoint:

   • Enter the Path, /var/lib/mongo/.

   • Select the Policy Type. You can select Standard or Live Data Transformation (LDT).

   • Create a User Set with users mongod and usr/bin/mongod, and give them the permission to perform all Actions and Effects. The default access is No Access.

   Refer to Creating GuardPointsfor details.

3. Once the policy is enabled, start the MongoDB database.