Duong_Nguyen-Nhat_2335

Encryption in ARA

Discussion created by Duong_Nguyen-Nhat_2335 on Apr 28, 2017
This has been asked recently:

How to encrypt the password correctly? 
Is it even possible to encrypt the password of the ARA DB? 
Is the communication between ARA and ARA-DB encrypted? 
Is the communication between ARA and AE/CP encrypted? 

Answer:

1) How to encrypt the password correctly? 

The password was encrypted via IIS 

2) Is it even possible to encrypt the password of the ARA DB? 

Yes, we can partly encrypt it: 

http://stackoverflow.com/questions/18852737/how-does-iis-config-file-encryption-work

3) Is the communication between ARA and ARA-DB encrypted? 

Encrypting data traffic to the database is a feature of database server. We do not have prior experience in this topic. 
Please consult: 
https://technet.microsoft.com/en-us/library/ms189067(v=sql.105).aspx 
https://docs.oracle.com/database/122/ASOAG/introduction-to-oracle-advanced-security.htm#ASOAG010 

4) Is the communication between ARA and AE/CP encrypted? 

AE-ARA communication is always encrypted using AES-256.

Outcomes