16.10 - About Confidentiality and Integrity QOP Policy - Teradata Database

Teradata Database Security Administration

Product
Teradata Database
Release Number
16.10
Release Date
June 2017
Content Type
Administration
Security
Publication ID
B035-1100-161K
Language
English (United States)

The quality of protection (QOP) defines the strength of the encryption algorithms the system uses when transmitting messages between Teradata Database and its clients.

There are 2 types of policy subject to Quality of Protection (QOP):

  • An integrity QOP determines the strength of the algorithm the system uses for calculating the checksum that guarantees message integrity.
  • A confidentiality QOP determines the strength of the algorithm for encrypting a message exchange between a client and Teradata Database. In the absence of a confidentiality QOP policy, client requests for confidentiality use the DEFAULT QOP. See Encryption.

You can assign confidentiality and integrity policies by:

  • Database user name or directory user name
  • Database profile
  • Client IP address
Users who access the database through a middle-tier application that uses pooled sessions are subject to the security policies assigned to the application logon user, rather than the policies assigned to them as individuals.

You can also enforce use of the DEFAULT confidentiality QOP by host group ID. See Requiring Confidentiality.

Java clients do not support encryption stronger than AES-128 without installation of a special security policy package. See QOP Configuration Change Guidelines.