Hi Nicolas,

Kindly follow the section "Configuring a Cassandra cluster for encryption" in the attached Pega Cassandra operations Guide.pdf.

Hope this helps in addressing your requirement.

Cheers,

Santhosh

Tagging @wtekiela who might have more inputs to share.

Hi Nicolas,

let me understand your requirements a bit more. By saying "encrypting data at rest", do you have any particular DSM component in mind? Or is the requirement to universally encrypt all stored data?

As far as I know, currently there is no way to just "enable" data encryption for managed Cassandra. However, you can implement encryption at the application level, before saving data into DDS. Another possibility - depending on the setup - would be to use an encrypted file system for cassandra_data directory. Tagging @kaman and @NigelPeach

Keen on hearing more about your exact requirements

Hi @wtekiela, @NigelPeach,

Thank you for your response. The client's use case is to encrypt some of the PII data fields such as name, phone number, birthday, gender and etc stored in the decision data store which is a DSM component running on internal Cassandra. They understand the PII data in DDS is stored as files on the server and raised concerns about the data security as currently they encrypted all the data in MS SQL Server database using transparent data encryption. Do you mean that there is no way to encrypt data at rest in Cassandra DDS apart from 1) encrypting data at application level before saving it in DDS and 2) leveraging encrypted file system for cassandra_data directory?

I found an encryption option (transparent_data_encryption_options) in Cassandra.yaml file from some of the mesh articles. Is this option not supported by Pega-managed Cassandra?

Let me know if you have any further questions on the client requirements. Looking forward to your reply.

Thanks,

Nicolas Li

Hi, the setting that you've mentioned (transparent_data_encryption_options) is only available in Cassandra 3.11 and later. Pega 7.3.1 uses Cassandra 2.1, which does not support this option. Cassandra 3.11.3 is available as part of the platform since Pega 8.3.