Security Guide > Security Guide > Using Data at Rest Encryption > Disable Access to an Encrypted Database
Was this helpful?
Disable Access to an Encrypted Database
To lock an encrypted database, disable the passphrase with the DISABLE PASSPHRASE statement. If the passphrase contains blanks, enclose it in single quotes. If the passphrase contains a single quote, escape the single quote by repeating it. Example with the passphrase containing blanks:
DISABLE PASSPHRASE 'my secret passphrase';
An attempt to access the database in a new database session results in an error message.
Note:  The DISABLE PASSPHRASE statement does not take effect for already running database sessions.However, it takes effect for new database sessions that are started after the statement has been run. If you want the statement to disable X100 access for all active database sessions, you can issue the statement “CALL X100(TERMINATE)” to terminate the X100 server process. As it rolls back currently open transactions, the SECURITY privilege or DB_ADMIN database permission is required to run this “CALL X100()” statement.
Note:  To lock an encrypted database in an emergency situation, the database owner can run the DISABLE PASSPHRASE statement without specifying the passphrase. The database owner must have the SECURITY privilege to perform this task.
Last modified date: 12/19/2024