Start Masking

tdm46
HID_Start_Masking
To begin the data masking process, click
Data Masking
in the left-hand navigation pane. Then click
Start Masking
from the menu below
Data Masking
. From this page you can also download the Fast Data Masker (FDM) Configuration, to allow you to perform the masking yourself in FDM.
You can begin the data masking process when you have the following:
  • A Data Model
  • Tags on columns in this Data Model to show that they contain PII (either from PII Scan or added manually)
If you do not have a Data Model, the page displays a 'Perform Data Discovery' button. If you click this, the
Data Discovery
page opens.
Create a Masking Configuration
The first Start Masking page contains the following options:
  • Mask all Tagged Columns in:
    You have the option to mask tagged columns according to one of the following options:
    • All tables
      Mask data in all tagged columns from all tables in the selected Environment
    • Confirmed tables only
      Only mask data in tagged columns, in tables which you manually mark as 'Confirmed' on the Data Model heat map display.
    If you check the box "Exclude tables marked as 'Not PII'", CA TDM does not mask tables that you manually marked as 'Not PII' in the Data Model section. This option overrides any tags you assign to columns in these tables.
  • Select Environment to Mask
    You can choose to apply the masking configuration to:
    • Current Environment
    • Other Environment
      (select environment from drop-down menu)
  • Masking scope
    You can choose to apply the masking configuration to:
    • Whole Environment
    • Specific Data Sources
      (select data sources from drop-down menu)
  • Mask Data in Preview Mode
    If you check this option, Fast Data Masker (FDM) does not mask the data. FDM creates an audit file, which contains the results of the masking process on the data you want to be mask.
  • Show pre-masked samples in the Audit Report
    Includes the unmasked source data in the audit report, and saves it in TDM's repository. This allows you to compare the data before and after masking. You can delete this data at any time from the Masking Jobs page.
Click
Next
.
The following page contains a Summary of your Masking job, and Additional Options.
Additional Options
There are two Additional Options available to you on this page. You should use these if you want to mask the data yourself using Fast Data Masker.
Download FDM Configuration
(Optional) Click on Download a
Configuration File
to download the Fast Data Masker configuration, if you prefer to run the data masking job manually in Fast Data Masker. This file is generated based on your choices from the Configure Data Masking and Masking Settings pages.
CA TDM downloads a zip file with the FDM configurations into your web browser's default download location.
The FDM configuration zip file includes the following files:
  • info.txt file
    Includes details about the PII data scan job such as:
    • if only confirmed tables included
    • if any not PII tables are excluded
    • for each connection profile, includes connection profile name, database type and the server name.
  • sub-directories:
    These are organised by Connection Profile > Server > Database > Schema.
    Each schema directory contains the following files:
    • Text file
      Includes connection details for FDM to connect to a database.
    • CSV file
      Includes the masking rules for tables and columns for a particular database.
    • Batch file
      Running the batch file (.bat) automatically uses the Connection Profile details in the text file and the masking rules in the csv file to perform masking in FDM.
    • options.txt
      A text file that contains the masking job's settings, as defined on the Masking Settings page.
  • run_mask_all.txt:
    It is a batch (.bat) file which is by default saved as a .txt file and performs masking on all your databases. To use the run_mask_all.txt file, rename the extension from .txt to .bat and run it on a Windows machine with FDM installed to perform masking on all your databases.
Generate and Download Database Constraints Scripts
(Optional) Click
Generate and Download Constraints scripts
, to download SQL scripts to disable and enable database constraints on Primary and Foreign keys, which may prevent completion of the mask job. If you need to disable database constraints, you should run the Pre-scripts before you execute the masking job, and run the Post-scripts after you execute the masking job. This applies to masking through CA TDM Portal, and to masking with FDM.
If you receive an error message for the masking job (on the Masking Jobs page), that indicates that CA TDM could not mask key columns, you should download and run constraints scripts.
If you choose this option, CA TDM downloads a ZIP file that contains the scripts for each database. The directory structure of this ZIP file is:
  • FDM_Scripts
    • Connection Profile
      • Server
        • Database
          • Schema.
Start Masking Process
When you are happy with the settings, select a
Schedule
for your masking job. This can be:
  • Now
    The job runs immediately
  • Schedule
    The job runs at the time you select
Click 
Mask
.
A warning displays, to inform you that the masking job will replace data for the Environments and Databases that you have selected. Click
Confirm 
to start this job.
The Masking Jobs page displays. The new masking job begins and is added to the table of masking jobs.