Using the LDT Encryption Method

If you want to encrypt your data using LDT, you need to create a Live Data Transformation policy and use that to create your GuardPoints. All encryption occurs in the background while users continue to access the data.

With LDT, the data will be automatically rekeyed periodically, based on the expiration date and the life span of the versioned key used to encrypt the data.

To use the LDT:

1. Make sure you have created the required policy components for DFS(R) as described in Creating Required DFS(R) Policy Components.

2. Make sure that you have a versioned encryption key.

3. Create the LDT policy as described in Creating a LDT Policy for DFS(R).

4. Create the GuardPoints you want to use as described in Creating a LDT GuardPoint for DFS(R).

   

   Note

   Make sure that all GuardPoints are at, or above, the level of the DFS(R) replication point. For example:

   • If the replication point is D:\, the CTE GuardPoint must also be at D:\. Adding a GuardPoint on a directory in D:\, such as D:\data\, fails.

   • If the replication point is D:\data\, you can add a GuardPoint at D:\data\ or D:\, but you cannot add a GuardPoint on a subdirectory of D:\data\ such as D:\data\HR-files\.

5. Consider using QoS for optimal DFS(R) performance.