Security Best Practices
Enable Macro Encryption
Never hard-code sensitive credentials or personal information within your integration designs. Always use macros and macro encryption at design time for such data. For more information about encrypting macro values at design time, see
Managing Macro Sets and Macros.
Integration Manager stores macro values within a database. You should enable macro encryption for any production installations of Integration Manager so that sensitive data cannot be viewed directly form the database. See
Encrypt Macro Values at Rest. When enabled, all macro values are encrypted.
Note: We highly recommend that you do not share encryption keys between environments.
If you are a DataCloud customer, macro encryption is always enabled.
Enable HTTPS
Integration Manager authenticates all user access over HTTP or HTTPS protocol. Enable HTTPS (TLS 1.2) for any production installations of Integration Manager so that your API traffic cannot be read if intercepted. See
Configure HTTPS.
If you are a DataCloud customer, HTTPS (TLS 1.2) is always enabled.
Other Best Practices
• Connect only to external sources and targets that support and enable TLS 1.2 connections.
• Perform penetration testing on any internet-facing installations of Integration Manager at regular intervals. If you are a DataCloud customer, Actian Corporation takes care of this for you.
• Perform security reviews on any integration design that you plan to deploy to an internet-facing installation of Integration Manager or DataCloud. We can help: Contact our Services and Solutions team for more information. Partners are required to submit for security reviews prior to publishing an integration to their end users.