Mask Data with CA TDM Portal

This page contains information on the following topics:
As a Test Data Engineer (TDE), you can mask your data with the CA Test Data Manager Portal. This tool is essential to ensure the security of Personally Identifiable Information (PII) that you handle.
This page contains information on the following topics:
This video contains a summary of the masking process.

You can only mask data that is included in a CA TDM data model. See how to create a data model at Create a Data Model and Audit PII Data.
To perform masking tasks on a Data Model, a user must be in a User Group shared with the Connection Profile that created the Data Model. For more information, see User and Group Management.
Masking Process
CA TDM Portal uses Fast Data Masker (FDM) to mask data. The masking process uses masking functions in FDM. These functions are specific to data types (VARCHAR, DATE, NUMBER etc). For a full list of masking functions available in CA TDM, see Masking Functions and Parameters.
Mask Function Groups
are configurations of masking functions that CA TDM Portal uses to generate FDM masking jobs. These groups include masking functions, in the order to execute them, with specific seedlists as parameters where appropriate.
For example:
the Mask Function Group 'Post Code (UK)' contains one masking function ('HASHLOV'), and specifies the seedlist 'UK Post Codes' as the masking function's parameter.
TDM Portal masks columns with Mask Function Groups, based on tags that you assign to those columns in TDM Portal. You can assign more than one tag to a column - when you do this, TDM Portal defines the first tag as the column's Primary Tag, and assigns a Mask Function Group based on this tag.
You can change the Mask Function Group that CA TDM Portal assigns to a column, and create your own custom groups. For more information, see Configure Data Masking.
Assign tags to columns
You can assign tags to columns in two ways (you can use a combination of both):
  • Via PII Scan
    Run the PII Scan to assign tags based on analysis of the data model.
    Default Mask Function Groups are assigned to tags by the PII Scan, but you can choose from other compatible Mask Function Groups on the Configure Data Masking page. 
  • Manually
    Assign tags to columns yourself. See how to do this at Manually Review PII Data.
Masking Procedure - steps
When you have a Data Model, and you have tags assigned to one column or more, you can mask your data. This procedure guides you through the data masking process in CA TDM Portal.
The following pages under the Data Masking tab are only available when you have a Data Model.
Follow these steps:
  1. Click the 
    Data Masking
     tab from the left-hand panel.
    The Data Masking home page displays. You can click
    Get Started
    to go directly to the Start Masking
    page (step 4).
  2. (Optional) Click the
    button under the
    Data Masking
    section in the left-hand panel.
    The Configure Data Masking
    page opens.
    Here you can adjust masking configurations for individual columns.
  3. (Optional) Click the 
    Masking Settings
     button under the 
    Data Masking
     section in the left-hand panel.
    The Masking Settings
    page opens.
    Here you can adjust settings that affect the entire masking process.
  4. Click the
    Start Masking
    button under the 
    Data Masking
     section in the left-hand panel.
    The Start Masking page opens.
    Here you can begin the masking job, or schedule it to start at a later time.
    If you do not have a data model, the
    Data Masking
     page only contains a
    Create Data Model
    button, which directs you to the data model page.
  5. (Optional) Click the 
    Masking Jobs 
    button under the 
    Data Masking
     section in the left-hand panel.
    The Masking Jobs page displays.
    This page lists all masking jobs (all Scheduled, In Progress or Completed).
The Remote Masking engine in Docker
Test Data Manager
4.8, data masking is possible in the TDM Portal in Docker.
Additionally, the Masking Engine is available as a Docker container. This means that there are a number of methods available by which you can perform masking with Docker:
  • In TDM Portal Docker container
    Mask data with TDM Portal in Docker, the same way you would with a standard Windows installation.
  • TDM Portal in Docker - masking engine(s) on local Docker network
    Send masking jobs to masking engine(s) in the same Docker network as the TDM Portal container.
  • TDM Portal in Docker - send to external engine(s)
    Send masking jobs from an instance of TDM Portal in a Docker container, to one or more masking engines on remote hosts.
  • TDM Portal in Windows sends masking jobs to masking engine(s) in Docker container(s)
    A standard installation of TDM Portal sends masking jobs to masking engine(s) running in Docker on remote host(s). This requires changes to the
For more information, see Scalable masking with Docker.