Re: [U2] Universe 11.x
Thanks Allen -Original Message- From: u2-users-boun...@listserver.u2ug.org [mailto:u2-users-boun...@listserver.u2ug.org] On Behalf Of Allen Egerton Sent: Friday, December 14, 2012 6:26 PM To: U2 Users List Subject: Re: [U2] Universe 11.x On 12/14/2012 12:16 PM, Oaks, Harold wrote: Universe folks: Who has upgraded from Universe 10.x to Universe 11.x lately? Is it painless? Like - get the users out, install Universe 11.x in 5 minutes, then get the users back in. Then, as time permits, take advantage of the new features within Universe 11.x. Or - is it a big deal to install it? My manager is interested in data encryption in the underlying data. It is my understanding the Automatic Data Encryption (ADE) only exists in Universe 11.x. Is that right? If the install is simple enough, that would seem to be the way to go to obtain this feature for all fields. If you use indexes, check the release to make sure they'll be okay. -- allen ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users This e-mail and related attachments and any response may be subject to public disclosure under state law. ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users
Re: [U2] Universe 11.x
If you are planning to use ADE, then please *plan*. As David says, a strategy to manage encryption keys is absolutely necessary, and planning for worst-case scenarios is recommended. 1) Backups - how (and where) do you manage keys.. Do you keep the keys with the data (as an example)? 2) If you needed to retrieve data in 7 years time (e.g. a tax audit) - would you know all the keys - and the passwords - used 7 years ago? 3) Would your successors in the Company know how to obtain - and use - those same keys and passwords? 4) Is it so easy that anyone stealing a backup tape would have the keys and passwords as well? 5) What is the backup / archive strategy when individual keys and/or passwords are added or changed at a point in time? 6) Fully test any DR scenario - use observers from outside the immediate I.T. team to keep it honest: *** Freshly change encryption keys on a file that day - after the last backup - before the failure Is simulated *** Simulate loss of the current system hardware (e.g., fire or flood) *** Simulate loss of key staff - forget what you know. *** Use different hardware - with no previous user IDs created *** Ignore all previous knowledge of keys, passwords and procedures - only work from routinely secured media and stored documentation *** Fresh installation of UniVerse or UniData *** Document every step followed so the post-mortem can check this was an honest test 7) Run a post mortem - use the observers to help appraise the results. *** Did it work? *** Was it TOO easy to unlock data? *** Was it too difficult / time consuming? 8) Run the application(s) and exercise all the files after recovery 9) Re-run the scenario until it works flawlessly 10) Repeat at regular intervals - e.g. annually. Why be so careful? Unlike file corruption (for example) - restore from backup ALONE may not be a solution. It is possible to have your data and for it to still be beyond use. You don't need to feel concerned about using ADE - it has been fairly hammered in a number of scenarios as the consequences of a serious issue are well appreciated. You DO need to plan and be extra careful. Check for any specific advice, issues or notices as a matter of routine diligence. Regards JayJay ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users
Re: [U2] Universe 11.x
Your mileage will vary - the more UV specific features or APIs or the like you utilise - they more issues you're likely to have. As these tend to change at each release. If on the other hand, you have plain vanilla application then you're unlikely to have issues...then all you're doing is project managing your migration to a new host, UV release and performing testing to ensure you configuration, software and end-to-end processes are A-OK afterwards. As with any software release - carefully review the release / technical notes - especially if you have any mind any new feature you wish to use. Caution and clear objectives on how and why you're going to implement ADE is recommended. It's a greatly improved facility over previous versions - with some new features added to dramatically improve it and easy administration. However, never buy or use version 1.x of any software - extra care (and testing) is needed (especially reading the tech / release notes so you're fully aware of known issues - some which can be OS and release specific). Some good test cases for worse cases scenarios for ADE would be recommended too... also think about what would happen if you needed to retrieve encrypted files from backups. Will these same backups include the UV version/keys, etc. that you can restore the data in any unencrypted form? Is the administrative overhead of maintaining a ADE database files really worth it? Would OS-level filesystem encryption be a better choice? -Original Message- From: u2-users-boun...@listserver.u2ug.org [mailto:u2-users-boun...@listserver.u2ug.org] On Behalf Of Oaks, Harold Sent: Saturday, 15 December 2012 4:16 AM To: U2 Users List Subject: [U2] Universe 11.x Universe folks: Who has upgraded from Universe 10.x to Universe 11.x lately? Is it painless? Like - get the users out, install Universe 11.x in 5 minutes, then get the users back in. Then, as time permits, take advantage of the new features within Universe 11.x. Or - is it a big deal to install it? My manager is interested in data encryption in the underlying data. It is my understanding the Automatic Data Encryption (ADE) only exists in Universe 11.x. Is that right? If the install is simple enough, that would seem to be the way to go to obtain this feature for all fields. Thanks- Harold Oaks Clark County, WA This e-mail and related attachments and any response may be subject to public disclosure under state law. ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users ** IMPORTANT MESSAGE * This e-mail message is intended only for the addressee(s) and contains information which may be confidential. If you are not the intended recipient please advise the sender by return email, do not use or disclose the contents, and delete the message and any attachments from your system. Unless specifically indicated, this email does not constitute formal advice or commitment by the sender or the Commonwealth Bank of Australia (ABN 48 123 123 124) or its subsidiaries. We can be contacted through our web site: commbank.com.au. If you no longer wish to receive commercial electronic messages from us, please reply to this e-mail by typing Unsubscribe in the subject line. ** ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users
[U2] Universe 11.x
Universe folks: Who has upgraded from Universe 10.x to Universe 11.x lately? Is it painless? Like - get the users out, install Universe 11.x in 5 minutes, then get the users back in. Then, as time permits, take advantage of the new features within Universe 11.x. Or - is it a big deal to install it? My manager is interested in data encryption in the underlying data. It is my understanding the Automatic Data Encryption (ADE) only exists in Universe 11.x. Is that right? If the install is simple enough, that would seem to be the way to go to obtain this feature for all fields. Thanks- Harold Oaks Clark County, WA This e-mail and related attachments and any response may be subject to public disclosure under state law. ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users
Re: [U2] Universe 11.x
Ah ha ha ha ha ha ha ha ha ha ha ha *crash* -Original Message- From: Oaks, Harold harold.o...@clark.wa.gov To: U2 Users List u2-users@listserver.u2ug.org Sent: Fri, Dec 14, 2012 9:16 am Subject: [U2] Universe 11.x Universe folks: Who has upgraded from Universe 10.x to Universe 11.x lately? Is it painless? Like - get the users out, install Universe 11.x in 5 minutes, then get the users back in. Then, as time permits, take advantage of the new features within Universe 11.x. Or - is it a big deal to install it? My manager is interested in data encryption in the underlying data. It is my understanding the Automatic Data Encryption (ADE) only exists in Universe 11.x. Is that right? If the install is simple enough, that would seem to be the way to go to obtain this feature for all fields. Thanks- Harold Oaks Clark County, WA This e-mail and related attachments and any response may be subject to public disclosure under state law. ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users
Re: [U2] Universe 11.x
What I meant to say is, No, you can't do it in five minutes. -Original Message- From: Wjhonson wjhon...@aol.com To: u2-users u2-users@listserver.u2ug.org Sent: Fri, Dec 14, 2012 9:29 am Subject: Re: [U2] Universe 11.x Ah ha ha ha ha ha ha ha ha ha ha ha *crash* -Original Message- From: Oaks, Harold harold.o...@clark.wa.gov To: U2 Users List u2-users@listserver.u2ug.org Sent: Fri, Dec 14, 2012 9:16 am Subject: [U2] Universe 11.x Universe folks: Who has upgraded from Universe 10.x to Universe 11.x lately? Is it painless? Like - get the users out, install Universe 11.x in 5 minutes, then get the users back in. Then, as time permits, take advantage of the new features within Universe 11.x. Or - is it a big deal to install it? My manager is interested in data encryption in the underlying data. It is my understanding the Automatic Data Encryption (ADE) only exists in Universe 11.x. Is that right? If the install is simple enough, that would seem to be the way to go to obtain this feature for all fields. Thanks- Harold Oaks Clark County, WA This e-mail and related attachments and any response may be subject to public disclosure under state law. ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users
Re: [U2] Universe 11.x
I have done it 10 or more times on AIX, now without issue. Make sure you use the latest version of 11.x, earlier ones had some problems. To make for an easy rollback in case of problems, I always make copies of the uv and unishared directories before starting. This way if there is a problem, you can quickly go back. Also suggest you test your login and the Rocket Customer support site before starting, since you will need to authorize the new release. -- Carl Dula Voice: 973-227-8440 X111 Pulsar Systems, Inc.Fax: 973-227-8440 271 US Highway 46, STE H209 email:c...@pulsarsystems.com Fairfield, NJ 07004-2474http://www.pulsarsystems.com ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users
Re: [U2] Universe 11.x
On 12/14/2012 12:16 PM, Oaks, Harold wrote: Universe folks: Who has upgraded from Universe 10.x to Universe 11.x lately? Is it painless? Like - get the users out, install Universe 11.x in 5 minutes, then get the users back in. Then, as time permits, take advantage of the new features within Universe 11.x. Or - is it a big deal to install it? My manager is interested in data encryption in the underlying data. It is my understanding the Automatic Data Encryption (ADE) only exists in Universe 11.x. Is that right? If the install is simple enough, that would seem to be the way to go to obtain this feature for all fields. If you use indexes, check the release to make sure they'll be okay. -- allen ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users
