Changing the encryption key to secure data


The TrueSight Operations Management Report Engine uses AES encryption standard to store passwords. It supports AES encryption in two key sizes: 256-bit and 128-bit. AES 256-bit encryption is not allowed in some countries due to import regulations. Based on the import regulations in your region or country, you need to set the appropriate encryption key size before installing the TrueSight Operations Management Report Engine. Post the TrueSight Operations Management Report Engine installation, you can change the encryption key using the EncryptionKeyReset command line utility.

  1. Navigate to the ReportsCLI directory location.
    For Windows: <ReportEngineInstallDirectory>\ReportEngine\bin\reportsCLI
    For Linux: <ReportEngineInstallDirectory>/ReportEngine/bin/reportsCLI

     

  2. Run the EncryptionKeyReset.bat command line utility as shown in the following example:

    EncryptionKeyReset.bat

    The command prompts you to answer the following questions, and type the appropriate answers. 

    This operation needs Report Engine restart. Do you want to continue (Y/N)?
    Stopping Report Engine service...
    Please enter RE database credentials
    Database login:
    Database login password:
    Starting Report Engine service...
    Successfully changed AES encryption key and updated all the passwords.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*