Automatic Encryption of Data at Rest and in Transit

To comply with GDPR and to ensure that aspects such as security of processing are achieved, personal data must be encrypted, both when at rest and when in transit. For more information about setting up the encryption of data at rest and in transit, see Data at rest and Data in transit, or refer to the OneSpan Authentication Server Appliance Administrator Guide and the OneSpan Authentication Server Appliance Administrator Reference.

Encryption with file-based key management

During a installation of OneSpan Authentication Server with the embedded MariaDB ODBC database, data are automatically encrypted by means of file-based key management. The data-at-rest encryption key file and self-signed ODBC SSL certificates, unique for each organization, are automatically generated, and the ODBC connection is encrypted.

The key file and the self-signed ODBC SSL certificates cannot be customized.