Integrating and Configuring EDB

This chapter describes how to configure and integrate Enterprise DB Postgres Advanced Server (EDB) with CTE in Linux. It contains the following sections:

• Preparing to Create GuardPoints

• Integration with CTE

Overview

EDB provides database management software to get more functionality from PostgreSQL. EDB offers secure, scalable, advanced and enterprise-class PostgreSQL solutions. Advanced Server extends PostgreSQL with the security and performance features that enterprises need. It’s also compatible with Oracle databases.

Prerequisites

Refer to EDB documentation for information on how to setup and configure EnterpriseDB.

Preparing to Create GuardPoints

Before you can safely reboot your machine, create GuardPoints, and administer any of the services, you must perform the following steps:

1. Stop the EDB service.

2. Open the /lib/systemd/system/edb-as-13.service file.

3. Below the [Unit] section, add the following line: Requires=secfs-fs-barrier.service.

4. Save the file and exit.

5. Open the file: /lib/systemd/system/secfs-fs-barrier.service.

6. At the end of the [Before] clause, add edb-as-13.service.

7. Save the file and exit.

8. Type: systemctl daemon-reload.

9. Type: systemctl start edb-as-13.service.

10. Reboot the system.

11. Stop the EDB.

12. Restart SecFS.

13. Start the EDB service again.

Integration with CTE

The following describes how to integrate EDB with CTE using an offline dataxform policy:

1. Enable and start EDB.

2. Create a database with sample data.

3. Install the latest CTE build. Refer to the CTE Agent Linux Quick Start Guide for more information.

4. Register CTE with a CipherTrust Manager.

5. Stop the EDB service.

6. Guard the EDB data and log directories with a Dataxform policy.

   For example, create a policy that transforms from Clear key to AES256.

7. Perform a data transformation on both directories.

8. After Dataxform finishes, guard both directories with a policy using the correct key.

   For example, use AES256 on both directories.

9. After the database and log directories are guarded, start the EDB service again.