Setting the AES encryption key size for the PATROL Agent
PATROL Agent uses the Advanced Encryption Standard with Galois/Counter Mode (AES-GCM) standard to store the data and passwords. AES-GCM is more secure than its predecessor AES-CBC. PATROL Agent supports AES-GCM in 256-bit key size.
Current version of the PATROL Agent is backward compatible with the older encryption mechanisms.
To set the AES encryption size (applicable only to AES-CBC)
Due to import regulations in some countries, AES 256-bit encryption is not allowed. You need to select the appropriate encryption key size by setting the
BMC_TS_KEY_SZ environment variable as shown in the following code block:
#Microsoft Windows set BMC_TS_KEY_SZ=128 #Unix export BMC_TS_KEY_SZ=128
BMC_TS_KEY_SZ environment variable can be set to either 128 or 256 depending on the requirement, and is applicable only to AES-CBC.