Work with Field Encryption Registry (WRKFLDENC)

The WRKFLDENC command allows authorized users to work with the entries in the Field Encryption Registry. This command’s screen includes functions to add, change, activate, deactivate and remove field entries.

                                               

 7/16/07       Work with Field Encryption Registry    

22:04:19                                              CRRM040  D2

                                                    

Type options, press Enter.                                       

   2=Change   3=Copy  4=Remove   5=Display   7=Activate      8=Deactivate 10=Change Key   12=Display Key History         

                                                                

Opt  Field identifier      Database Field     Status 

___  BANK_ACCOUNT          BANKNO             *ACTIVE  

___  CREDIT_CARD           CCNO               *ACTIVE  

__   BIRTH_DATE            BTHDATE            *INACTIVE

__   SOCIAL_SECURITY_NBR   SOCIAL             *PROCESS

                                            

       

F3=Exit   F5=Refresh   F6=Add   F11=View2   F12=Cancel                      

Screen Example:  WRKFLDENC Command with Sample Values

How to Get There

From the Field Encryption Menu, choose option 1, Work with Field Encryption (WRKFLDENC). Or, execute the command CRYPTO/WRKFLDENC.

For each field entry listed, the WRKFLDENC screen shows the user-assigned field identifier, the actual database field name and the status.  Press F11 to view more information about each entry.

Status codes

Listed below are the possible status codes that may be displayed for each entry.

Status Description
*ACTIVE The field entry is activated for encryption.
*INACTIVE The field entry is not activated for encryption.
*PROCESS The field entry is currently being processed for activation or deactivation. 
*ERROR The activation or deactivation process failed and requires HelpSystems support.

Options

For each entry listed on the screen, you can utilize one of the following options.

Option Description
2 Displays the Change Field Encryption Entry (CHGFLDENC) panel, where you can change the field entry using the CHGFLDENC command.
3 Displays the Copy Field Encryption Entry (CPYFLDENC) panel, where you can copy the field entry using the CPYFLDENC command.
4 Displays a prompt to confirm the removal of the field entry using the RMVFLDENC command.
5 Displays the Display Field Encryption Entry (DSPFLDENC) panel, which shows the values for the field entry using the DSPFLDENC command.
7 Displays a prompt to activate the field entry for encryption using the ACTFLDENC command.
8 Displays a prompt to deactivate the field entry from encryption using the DCTFLDENC command.
10 Displays the Change Field Encryption Key (CHGFLDKEY) panel, which allows you to change the field entry’s encryption/decryption keys using the CHGFLDKEY command.
12 Displays the history of the Keys (used to encrypt/decrypt the field entry values) using the WRKFLDKEY command.
14 Displays the Edit Authorization List command for Authorization List for the Full Value.
15 Displays the Edit Authorization List command for Authorization List for the Masked Value.
16 Displays the Change Field Mask (CHGFLDMSK) panel, where you can change the field mask using the CHGFLDMSK command.
17 Displays the Change Field Authorization Lists (CHGFLDAUTL) panel, where you can change the field Authority lists using the CHGFLDAUTL command.
18 Displays the Add a Field Encryption Pending Key (ADDPNDKEY) panel, where you can add a pending key using the ADDPNDKEY command.
19 Displays the Change a Field Encryption Pending Key (CHGPNDKEY) panel, where you can change a pending key using the CHGPNDKEY command.
20 Displays a prompt to allow you to remove a pending key using the RMVPNDKEY command.
21 Displays a prompt to allow you to display a pending key using the DSPPNDKEY command.

Function Keys

Listed below are the function keys you can utilize within the WRKFLDENC screen.

Fnctn Description
F3 Exits the WRKFLDENC screen.
F5 Refreshes the list of field entries in the Registry.
F6 Opens the Add Field Encryption Entry (ADDFLDENC) panel, where you can add a new field entry in the Registry (using the ADDFLDENC command).
F11 Additionally shows the field entry’s database file name, external storage setting and trigger setting.
F12 Display key history.
F14 Edit Full Authorization List for entry .
F15 Edit Masked Authorization List for entry.
F23 Show more options.