Support for Encryption at Rest
ServiceDesk Plus brings in an option to encrypt columns in the database to secure user data. All you need to do is just select the fields which you think can expose user data and encrypt them, the data will remain encrypted and safe.
How is it done in different databases?
- For PGSQL database, pgcrypto, a cryptographic module of Postgres is used for encryption.
- For MSSQL, master key, symmetric key, and certificate are used for encryption.
How can you secure the data?
You can individually encrypt user data provided in additional fields by ticking off the checkboxes present along the respective additional fields while creating them.
- Head to Admin.
- Select the additional field you want to encrypt. For e.g., for incident additional field, head to Admin>>Helpdesk Cuztomizer>>Incident Additional Fields.
- Tick on the Encrypt the Field checkbox for the respective additional field.
- Click Save.
.png?Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9kemY4dnF2MjRlcWhnLmNsb3VkZnJvbnQubmV0L3VzZXJmaWxlcy84NjYvMTQyNjIvY2tmaW5kZXIvaW1hZ2VzL1NjcmVlbiUyMFNob3QlMjAyMDE4LTA1LTE4JTIwYXQlMjAxMl8xNF8zNSUyMFBNKDEpLnBuZyIsIkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTc2NDkwOTM5Mn19fV19&Signature=FXeNgMma~Op6CRRljRreSO1ZIOdJFPOTGPfqj~wZcmkgqcQvN6iXmUPEH1O7e6~Ud15RaSCXV3EY1G7mCVOrEq0MPvfxdvGywICMwOsDpTRwGQz1kjuooFbOvuZx1Ycia-cQ5lJw48sLG-g4VE7Mrn0BHP5lk6xHx9Dttrx1D8XIebbr2c38J-pd4U0hDZIrdawjcmWjJ5sM0epFEfKVCyKTCabuEicDthKyqeKfLg4DSAygM7YrITlNu9pCm6NBJtlS4brjylZAViskr2Ut56lRN6JQErVUeA2E~4yANJt7ojTJrSwkFQn9rJsZGcFXG16CTkbU6vP-raeuF9A~8Q__&Key-Pair-Id=K2TK3EG287XSFC)
Note: Encryption option is available only while adding an additional field. Fields cannot be encrypted while editing an additional field. Also once the fields are marked for encryption, they cannot be unmarked.
For FAQs related to EAR, check this page.