AUTHLIB Procedure

Example 13: Binding a Library with Required AES Encryption When Existing Data Sets Are Encrypted with the Same Encryption Key

Features:
PROC AUTHLIB statement options:
CREATE statement options:
ENCRYPT=
ENCRYPTKEY=
PW=
REQUIRE_ENCRYPTION
SECUREDLIBRARY=
SECUREDFOLDER=

Details

This example demonstrates how to bind a library with requiring that all of the data sets in this metadata-bound library have AES encryption and have the same encryption key.

Program

proc authlib lib=abcde; 
    create  seclib="ABCDEEmps"
        securedfolder="Department XYZZY"
        pw=secret 
        require_encryption=yes 
        encrypt=aes 
        encryptkey=abc ;
run;
quit;

Program Description

Library ABCDE has three data sets: Employees, EmpInfo, and DeptName. Data set EmpInfo has encryption key value of abc. The other two data sets are not AES-encrypted. None of the data sets have passwords.
proc authlib lib=abcde;
Using the CREATE statement, enter the name of the metadata folder and name the secured library object in the SAS Metadata Server.REQUIRE_ENCRYPTION=YES specifies that all data sets in the metadata-bound library are automatically AES-encrypted.
    create  seclib="ABCDEEmps"
        securedfolder="Department XYZZY"
        pw=secret 
        require_encryption=yes 
        encrypt=aes 
        encryptkey=abc ;
run;
quit;
Results:The library ABCDE is bound, and all of the data sets are bound and AES-encrypted with the same encryption key.

Log Examples

Library ABCDE Requiring AES Encryption When the Data Sets Are Already Encrypted with the Same Encryption Key 
40   proc authlib lib=abcde;
41   create  seclib="ABCDEEmps"
42         securedfolder="Department XYZZY"
43         pw=XXXXXX
44         require_encryption=yes
45         encrypt=aes
46         encryptkey=XXX ;
47   run;

NOTE: Setting library to require encryption.
NOTE: Required encryption will use AES encryption with the recorded key.


NOTE: Successfully created a secured library object for the physical library ABCDE and recorded its location as:
           SecuredFolder:      /System/Secured Libraries/Department XYZZY
           SecuredLibrary:     ABCDEEmps
           SecuredLibraryGUID: 9FD6C5D9-EF00-4CDC-8D0A-348D08BB329E
NOTE: Copying data set ABCDE.DEPTNAME in place to do required encryption with the library's required encryption key and
      passwords.
NOTE: Renaming the data set ABCDE.DEPTNAME to ABCDE.__TEMP_ENCRYPT_FILE_NAME__.
NOTE: Copying the data set ABCDE.__TEMP_ENCRYPT_FILE_NAME__ to ABCDE.DEPTNAME.
NOTE: Metadata-bound library permissions are used for ABCDE.DEPTNAME.DATA.
NOTE: Successfully added new secured table object "DEPTNAME.DATA" to the secured library object at path "/System/Secured
      Libraries/Department XYZZY/ABCDEEmps" for data set ABCDE.DEPTNAME.DATA.
NOTE: There were 10 observations read from the data set ABCDE.__TEMP_ENCRYPT_FILE_NAME__.
NOTE: The data set ABCDE.DEPTNAME has 10 observations and 2 variables.
NOTE: Deleting the data set ABCDE.__TEMP_ENCRYPT_FILE_NAME__.
NOTE: The passwords on ABCDE.DEPTNAME.DATA were successfully modified.
NOTE: Successfully added new secured table object "EMPINFO.DATA" to the secured library object at path "/System/Secured
      Libraries/Department XYZZY/ABCDEEmps" for data set ABCDE.EMPINFO.DATA.
NOTE: The passwords on ABCDE.EMPINFO.DATA were successfully modified.
NOTE: Copying data set ABCDE.EMPLOYEE in place to do required encryption with the library's required encryption key and
      passwords.
NOTE: Renaming the data set ABCDE.EMPLOYEE to ABCDE.__TEMP_ENCRYPT_FILE_NAME__.
NOTE: Copying the data set ABCDE.__TEMP_ENCRYPT_FILE_NAME__ to ABCDE.EMPLOYEE.
NOTE: Metadata-bound library permissions are used for ABCDE.EMPLOYEE.DATA.
NOTE: Successfully added new secured table object "EMPLOYEE.DATA" to the secured library object at path "/System/Secured
      Libraries/Department XYZZY/ABCDEEmps" for data set ABCDE.EMPLOYEE.DATA.
NOTE: There were 22 observations read from the data set ABCDE.__TEMP_ENCRYPT_FILE_NAME__.
NOTE: The data set ABCDE.EMPLOYEE has 22 observations and 11 variables.
NOTE: Deleting the data set ABCDE.__TEMP_ENCRYPT_FILE_NAME__.
NOTE: The passwords on ABCDE.EMPLOYEE.DATA were successfully modified.
48   quit;
Copyright © SAS Institute Inc. All rights reserved.