AUTHLIB Procedure

Example 14: Changing the Encryption Key on a Metadata-Bound Library That Requires AES Encryption

Features:
PROC AUTHLIB statement options:
MODIFY statement options:
ENCRYPT=
ENCRYPTKEY=
PW=

Details

This example demonstrates how to use the MODIFY statement to change the stored library encryption key if you believe that the metadata-bound library encryption keys might have been compromised.

Program

proc authlib lib=abcde;
    modify  
       pw=secret 
       encrypt=aes 
       encryptkey=/new;

run;
quit;

Program Description

Library ABCDE has three data sets: Employees, EmpInfo, and DeptName. In this library, all data sets are AES-encrypted with encryption key value abc since AES encryption is required for the metadata bound library.
proc authlib lib=abcde;
Use the MODIFY statement to change the library encryption key and the data set encryption key. You must specify ENCRYPT=AES. 
    modify  
       pw=secret 
       encrypt=aes 
       encryptkey=/new;

run;
quit;
Results:The library ABCDE remains bound with the same password and a new encryption key. All three data sets remain bound with the same password and a new encryption key. Note that the data sets were copied-in-place to be encrypted with the new key value.
Changing the Encryption Key ABCDE Library 
502  proc authlib lib=abcde;
503  modify
504  pw=XXXXXX
505  encrypt=aes
506  encryptkey=/XXX;
507  run;

NOTE: Changing the required encryption key.


NOTE: The passwords on ABCDE.DEPTNAME.DATA do not require modification.
NOTE: Copying data set ABCDE.DEPTNAME in place to do required encryption with the library's required encryption key and
      passwords.
NOTE: Renaming the data set ABCDE.DEPTNAME to ABCDE.__TEMP_ENCRYPT_FILE_NAME__.
NOTE: Copying the data set ABCDE.__TEMP_ENCRYPT_FILE_NAME__ to ABCDE.DEPTNAME.
NOTE: There were 4 observations read from the data set ABCDE.__TEMP_ENCRYPT_FILE_NAME__.
NOTE: The data set ABCDE.DEPTNAME has 4 observations and 2 variables.
NOTE: Deleting the data set ABCDE.__TEMP_ENCRYPT_FILE_NAME__.
NOTE: The passwords on ABCDE.EMPINFO.DATA do not require modification.
NOTE: Copying data set ABCDE.EMPINFO in place to do required encryption with the library's required encryption key and
      passwords.
NOTE: Renaming the data set ABCDE.EMPINFO to ABCDE.__TEMP_ENCRYPT_FILE_NAME__.
NOTE: Copying the data set ABCDE.__TEMP_ENCRYPT_FILE_NAME__ to ABCDE.EMPINFO.
NOTE: There were 5 observations read from the data set ABCDE.__TEMP_ENCRYPT_FILE_NAME__.
NOTE: The data set ABCDE.EMPINFO has 5 observations and 6 variables.
NOTE: Deleting the data set ABCDE.__TEMP_ENCRYPT_FILE_NAME__.
NOTE: The passwords on ABCDE.EMPLOYEE.DATA do not require modification.
NOTE: Copying data set ABCDE.EMPLOYEE in place to do required encryption with the library's required encryption key and
      passwords.
NOTE: Renaming the data set ABCDE.EMPLOYEE to ABCDE.__TEMP_ENCRYPT_FILE_NAME__.
NOTE: Copying the data set ABCDE.__TEMP_ENCRYPT_FILE_NAME__ to ABCDE.EMPLOYEE.
NOTE: There were 5 observations read from the data set ABCDE.__TEMP_ENCRYPT_FILE_NAME__.
NOTE: The data set ABCDE.EMPLOYEE has 5 observations and 6 variables.
NOTE: Deleting the data set ABCDE.__TEMP_ENCRYPT_FILE_NAME__.
NOTE: The passwords and/or encryption options for the secured library object with path "/System/Secured Libraries/Department
      XYZZY/ABCDEEmps" were successfully modified."
NOTE: All data sets in library ABCDE are properly protected with the metadata-bound library passwords and encryption options.
      Replaced Passwords and encryption keys were purged.
NOTE: Purged 1 versions of the replaced passwords and encryption keys older than 2015-05-04T15:40:57-05:00.
508  quit;
NOTE: Renaming the data set ABCDE.EMPLOYEE to ABCDE.__TEMP_ENCRYPT_FILE_NAME__.
NOTE: Copying the data set ABCDE.__TEMP_ENCRYPT_FILE_NAME__ to ABCDE.EMPLOYEE.
NOTE: There were 22 observations read from the data set ABCDE.__TEMP_ENCRYPT_FILE_NAME__.
NOTE: The data set ABCDE.EMPLOYEE has 22 observations and 11 variables.
NOTE: Deleting the data set ABCDE.__TEMP_ENCRYPT_FILE_NAME__.
NOTE: The passwords and/or encryption options for the secured library object with path "/System/Secured
      Libraries/Department XYZZY/ABCDEEmps" were successfully modified.
Copyright © SAS Institute Inc. All rights reserved.