Database encryption

When you install the embedded MariaDB database, you will be prompted to specify whether to enable encryption for the database store and all connections to the embedded database. If you specify to encrypt the database store and the database connections, the setup program automatically creates the required encryption keys and certificates and stores them in separate subfolders (cert and encr) within the following folder:

• %PROGRAMDATA%\VASCO\IDENTIKEY (Windows)
• /etc/vasco/ias (Linux)

The certificates are self-signed. MariaDB uses AES CBC for encryption. Both, certificates and encryption keys are password-protected. The respective passwords are randomly generated during installation.