User's Guide
   PART 4. Database Administration and Advanced Use
     CHAPTER 22. Keeping Your Data Secure       

Running the database server in a secure fashion

There are several security features that you can set when starting the database server or during server operation. These include the following:

• Controlling who can start and stop databases, who can create and delete database files, and who can stop the server.

       For more information on controlling permissions from the database server command line, see Controlling permissions from the command line.

• Encrypting client/server communications over the network.

  For greater security, you can force client/server network communications to be encrypted as they pass over the network.

  Encrypting client/server communications

You can set client/server encryption when you start the database server or, from one client, in the client connection parameters.

  To force encryption of client/server communications from the server:

1. Start the database server using the -e command-line option. For example:

   dbsrv6 -e -x tcpip asademo.db

     For a complete listing of database server command-line options, see The database server.

  To force encryption of client/server communications from a particular client:

1. Add the Encryption connection parameter to your connection string.

   ...UID=dba;PWD=sql;ENC=YES;...

   You can also set this parameter can be set on the Network tab of the connection dialog box and the ODBC data source dialog box.

     For more information, see Encryption connection parameter.