HP-UX Directory Server Administrator Guide HP-UX Directory Server Version 8.1 (5900-3098, May 2013)

2.3.3.2 Encryption ciphers
The encryption cipher is configurable on a per-attribute basis and must be selected by the
administrator at the time encryption is enabled for an attribute. Configuration can be done through
the Console or through the command line.
The following ciphers are supported:
• Advanced Encryption Standard (AES)
• Triple Data Encryption Standard (3DES)
All ciphers are used in Cipher Block Chaining mode.
After the encryption cipher is set, it should not be changed without exporting and re-importing the
data.
2.3.3.3 Configuring database encryption from the console
1. In the Configuration tab, select the Data node.
2. Expand the suffix, and select the database to edit.
3. Select the Attribute Encryption tab.
4. Click the Add Attribute button, to open the list of attributes. Select the attribute to encrypt.
48 Configuring Directory Databases