If you could add something to Kentico, what would it be and why?

Data Encryption

Allow option to have bizform and custom table data be stored in an encrypted format.

188 votes
Vote
Sign in
Check!
(thinking…)
Reset
or sign in with
  • facebook
  • google
    Password icon
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    anonymous shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

    18 comments

    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)
      Submitting...
      • John Fecteau commented  ·   ·  Flag as inappropriate

        Any update on this?

        Lacking field level encryption has really limited what we can/can't do with Custom Forms. And have now had to start exploring alternatives due to business needs.

      • Jonathan Healey commented  ·   ·  Flag as inappropriate

        TDE is fine where customers are on Windows Azure or already have SQL Enterprise licencing. In most circumstances if the customer is already committed to SQL Standard edition the cost of upgrading is prohibitive. This feature is a good candidate to only be available in EMS edition. For customers who need it upgrading from a lower licence edition would always be cheaper than any other option available to them

      • Anonymous commented  ·   ·  Flag as inappropriate

        as per US law we need to store data Encrypt data in DB
        this should be in kentico. biz form

      • Dave Nelson commented  ·   ·  Flag as inappropriate

        We also require field level encryption for sensitive data, today we solve this by not using Kentico for our forms that contain personal information. It would be fantastic to have a checkbox in the Field Editor to encrypt particular fields.

      • craig commented  ·   ·  Flag as inappropriate

        With more and more cyber attacks making main headline news I find customers increasingly asking more about personal data security and encryption...I can only see it becoming a standard requirement in not so distant future. Defo worth pushing for in bizforms at least

      • Jason Sherrill commented  ·   ·  Flag as inappropriate

        Dominik,

        We went the route of building our module to handle encryption of BIzForm fields so it's not as critical now, but it would still be a valuable addition to Kentico as a core feature given the security climate.

      • Jason Sherrill commented  ·   ·  Flag as inappropriate

        Dominik,

        When build the forms outside of Kentico using a separate .NET encryption component that provides AES encryption.

        In Kentico v6, we had used a beta component that Kentico was working on and had good results with it. We have updated the Kentico component for use in v8.1, but given that it's beta, we are limited in the projects where we can use it.

        Whole db encryption is an option with some projects, but not as versatile given that we don't always have control over the SQL environment on projects. It would be a far better option for us and our clients to have the beta component go RTM in the Kentico product.

        Thanks!

      • AdminDominik Pinter (Platform Product Owner, Kentico) commented  ·   ·  Flag as inappropriate

        Hi Jason,
        thank you for the comment about urgency of this functionality. I have one question, how do you solve it today if there is such requirement? Do you use different system than Kentico? What about transparent data encryption which is part of the SQL server, can you use this solution? If not, can you please tell me, why does it not cover your needs?

      • Jason Sherrill commented  ·   ·  Flag as inappropriate

        With data encryption not only a growing wish among customers, but in more & more industries a mandated compliance requirement, the lack of a data encryption component for forms that collect customer data is becoming a sales hurdle this year for customers considering Kentico.

      • AdminDominik Pinter (Platform Product Owner, Kentico) commented  ·   ·  Flag as inappropriate

        Hi,
        first of all - yes, it is planned but unfortunately there are still other requirements which have simple higher value for us and our customers (you can achieve this on database level for example).

        Our plan is to support any type of data within the Kentico CMS so your scenario should be covered as well.

      • David Bohner commented  ·   ·  Flag as inappropriate

        I would like to expand this feature to include custom Document Type data. Looks like this has been talked about for years, but is it actually planned?

      Feedback and Knowledge Base