text: **6.6 Data encryption**
  
  Encrypting data is a way of providing security and protection to your Content Manager 
  OnDemand data. 
  
  **6.6.1 Encrypting data at rest**
  
  Depending on how the database tables and archived data are stored, you can encrypt the 
  data by using either DB2 encryption or device encryption. The advantage of encrypting the 
  data is to make it “unintelligible” to unauthorized access even if it is accessed (as an extreme 
  example, the storage device is stolen). The cost of encrypting the data is increased processor 
  consumption and slower response time. This cost varies based on the device and encryption 
  methods that are used. 
  
  Backup data must always be encrypted because it is more susceptible to unauthorized 
  access. 
  
  **6.6.2 Encrypting data in motion: Secure communications**
  
  Transport Layer Security (TLS) and Secure Sockets Layer (SSL) allow secure communication 
  between the Content Manager OnDemand server and the Content Manager OnDemand 
  clients. Since Content Manager OnDemand version 8.5, support for SSL and its successor, 
  TLS, is enabled for all transmissions between the Content Manager OnDemand servers and 
  clients. When this section mentions SSL, the same information applies to TLS, unless 
  otherwise noted. 