Changing the encryption key to secure data
The TrueSight Operations Management Report Engine uses AES encryption standard to store passwords. It supports AES encryption in two key sizes: 256-bit and 128-bit. AES 256-bit encryption is not allowed in some countries due to import regulations. Based on the import regulations in your region or country, you need to set the appropriate encryption key size before installing the TrueSight Operations Management Report Engine. Post the TrueSight Operations Management Report Engine installation, you can change the encryption key using the EncryptionKeyReset command line utility.
Navigate to the ReportsCLI directory location.
For Windows: <ReportEngineInstallDirectory>\ReportEngine\bin\reportsCLI
For Linux: <ReportEngineInstallDirectory>/ReportEngine/bin/reportsCLIRun the EncryptionKeyReset.bat command line utility as shown in the following example:
EncryptionKeyReset.batThe command prompts you to answer the following questions, and type the appropriate answers.
This operation needs Report Engine restart. Do you want to continue (Y/N)?Stopping Report Engine service...Please enter RE database credentialsDatabase login:Database login password:Starting Report Engine service...Successfully changed AES encryption key and updated all the passwords.