topic Re: Metadata Bound Libraries encryption in SAS Data Management

Metadata Bound Libraries encryption

MVK — Thu, 15 Nov 2018 12:34:14 GMT

Hi All

We have implemented the Metadata Bound Libraries to test them at dev region. we ran some test and was able to encrypt data but while we retrieve data to traditional library or folder we still see data .

Please help me to understand why data is still visible outside the metadata bound libraries when copied it should have been encrypted one right.

Regards,

MVK

Re: Metadata Bound Libraries encryption

Kurt_Bremser — Thu, 15 Nov 2018 12:36:25 GMT

When you use SAS means to move/copy data, SAS will honor the setup of the target library, as it should be.

Re: Metadata Bound Libraries encryption

MVK — Thu, 15 Nov 2018 12:53:03 GMT

what in case if we use host commands like mv or cp of unix to non mbl folder to traditional folder ?

Re: Metadata Bound Libraries encryption

MVK — Thu, 15 Nov 2018 12:54:47 GMT

correction , I mean mbl folder to traditional folder , how will the encrypt data gets transformed.

Re: Metadata Bound Libraries encryption

Kurt_Bremser — Thu, 15 Nov 2018 13:06:34 GMT

If the target library is not metadata bound, then it will work as a classical library, with no encryption.

Keep in mind that every MBL has its own attributes and key. For a non-metadata-bound library, no key is defined, so SAS can't simply copy the file as is, because it would not be decryptable in any way.

Re: Metadata Bound Libraries encryption

Kurt_Bremser — Thu, 15 Nov 2018 13:07:29 GMT

@MVK wrote:

what in case if we use host commands like mv or cp of unix to non mbl folder to traditional folder ?

Then the file will be useless garbage, as the new library has no way to provide the decryption key, see my other post.

Re: Metadata Bound Libraries encryption

MVK — Thu, 15 Nov 2018 13:44:06 GMT

Thanks a lot for information provided. Appreciate your time and patience.