KB-8037: What encryption types is used for the various DirectAudit components?

Home >

KB-8037: What encryption types is used for the various DirectAudit components?

Product:

Centrify DirectAudit ,

Published:

29 December,16 at 06:54 PM

Rating:

Applies to:
All supported version of DirectAudit.

Question:
What type of encryption do the different DirectAudit components use?

Answer:

Communicating DA components	Is communication encrypted?	Encryption mechanism/technology used
Unix/Linux Agent <--> Collector	Yes	Advanced Encryption Standard (AES) 256
Windows Agent <--> Collector	Yes	Triple Data Encryption Standard (Triple-DES)
Collector <--> SQL Server	Yes/Forced	SSL 128 bit (SQL’s self-signed certificate may be used)
Audit Management Server <--> SQL Server	Yes/Forced	SSL 128 bit (SQL’s self-signed certificate may be used)
Communication between databases (e.g. Management database talking to Audit Store database)	Yes/Forced	SSL 128 bit (SQL’s self-signed certificate may be used)
PowerShell cmdlets <--> SQL Server	Yes/Forced	SSL 128 bit (SQL’s self-signed certificate may be used)
All components <--> Active Directory	Yes	Kerberos

Data-at-rest is not encrypted. Audited data stored in SQL server is not encrypted. The only exception is sensitive information such as Outgoing account credentials. These are always stored encrypted.

Information on storing DA Video Data can be found here:
KB-6881: How Is Direct Audit Video Data Stored In SQL To Prevent Unauthorized Viewing