11.0 Encrypting Data in eDirectory

NetIQ eDirectory lets you encrypt specific data when the data is:

  • Stored on the disk.

  • Transmitted between two or more eDirectory servers. This provides greater security for the confidential data.

You can protect data by encrypting the following:

  • Attributes: For protecting confidential data stored on the disk.

    See Encrypted Attributes.

  • Replication: For protecting confidential data during replication between eDirectory servers.

    See Encrypted Replication.

IMPORTANT:With the introduction of Enhanced Background Authentication (EBA), the data is automatically encrypted during data replication between EBA-enabled eDirectory servers. If one of the servers is not EBA-enabled, you can configure encrypted replication policies to encrypt the data.