Mechanism QOPs - Analytics Database - Teradata Vantage

Security Administration

Deployment
VantageCloud
VantageCore
Edition
Enterprise
IntelliFlex
VMware
Product
Analytics Database
Teradata Vantage
Release Number
17.20
Published
June 2022
ft:locale
en-US
ft:lastEdition
2024-04-05
dita:mapPath
hjo1628096075471.ditamap
dita:ditavalPath
qkf1628213546010.ditaval
dita:id
zuy1472246340572
lifecycle
latest
Product Category
Teradata Vantage™

Each applicable mechanism contains QOP options that can be set for that mechanism in the TdgssUserConfigFile.xml. The following example shows the TdgssUserConfigFile.xml for a fresh installation.

For an explanation of QOP options and instructions on making QOP settings, see Working with Quality of Protection Options.

       <!-- Teradata Method 2 (uses AES) -->
       <Mechanism Name="TD2">
            <!-- DHKeyP and DHKeyG are for legacy (pre-14.0) use only -->
            <MechanismProperties
                ...
                />
            <!-- To update security uncomment one or more QOPs and edit. -->
            <!-- DEFAULT QOP 
            <MechQop Value="Default">
                 AES-K128_GCM_PKCS5Padding_SHA2_DH-K2048
                 AES-K128_CBC_PKCS5Padding_SHA1_DH-K2048
                 AES-K192_GCM_PKCS5Padding_SHA2_DH-K2048
                 AES-K192_CBC_PKCS5Padding_SHA1_DH-K2048
                 AES-K256_GCM_PKCS5Padding_SHA2_DH-K2048
                 AES-K256_CBC_PKCS5Padding_SHA1_DH-K2048
            </MechQop>
            -->
            <!-- LOW SECURITY QOP
            <MechQop Value="Low">
                AES-K128_CBC_PKCS5Padding_SHA1_DH-K2048
            </MechQop>
            -->
            <!-- MEDIUM SECURITY QOP
            <MechQop Value="Medium">
                AES-K192_CBC_PKCS5Padding_SHA1_DH-K2048
            </MechQop>
            -->
            <!-- HIGH SECURITY QOP
            <MechQop Value="High">
                AES-K256_CBC_PKCS5Padding_SHA1_DH-K2048
            </MechQop>
            -->
        </Mechanism>