CA Strong Authentication Administration Guide › System Administrators Utilities › DBUtil: CA AuthMinder Database Utility › Updating the Master Key

Updating the Master Key

The master key is used to encrypt the values in the securestore.enc file. It also encrypts all encryption keys that are used by the product and are stored in the CA AuthMinder database.

Follow these steps:

1. Back up the current securestore.enc file.

   The current securestore.enc is available at:

   • On Windows

     <install_location>\Arcot Systems\conf\
     

   • On UNIX

     <install_location>/arcot/conf/
     

2. Delete the securestore.enc file that is available in the directory that is mentioned in the preceding step.
3. Open the Command Prompt Window.
4. Change the working directory to the following location where DBUtil is available:
   • For Windows:

     <install_location>\Arcot Systems\tools\win
     

   • For UNIX:

     <install_location>/arcot/tools/<platform_name>
     

5. Run the following command:

   (For software mode) dbutil -init <master_key>

   (For hardware mode) dbutil -init <master_Key_Label>

   The tool re-creates securestore.enc with the master key name that you specify.

   Important! If the master key setup fails, then contact CA Support for help.

6. Update the database information in the securestore.enc file.

   The CA Advanced Authentication installer automatically configures the database username/password and database DSN/password information in securestore.enc. However, after creating a securestore.enc file, manually insert this information in the new file by using the dbutil -pi option.

   To insert the supplied database values in securestore.enc, enter the following command:

   • (For software mode) dbutil -pi <dbUser> <dbPassword>
   • (For hardware mode) dbutil -pi <dbUser> <dbPassword> [-h HSMPin [-d HSMModule]]

     In the preceding command, dbUser is the database user name and dbPassword is the password that is associated with the specified user name. For example:

     dbutil -pi arcotuser welcome123  
     

     Note: The user name that you specify in this command is case-sensitive.

   • (For software mode) dbutil -pi <dsn> <dbPassword>

     Note: <dbPassword> is the password of the database user.

   • (For hardware mode) dbutil -pi <dsn> <dbPassword> [-h HSMPin [-d HSMModule]]

     In the preceding command, dsn is the data source name and dbPassword is the database password. For example:

     dbutil -pi arcotdsn welcome123 
     

     Note: The DSN name that you specify in this command is case-sensitive.

7. If you have performed distributed deployment of CA AuthMinder, then copy the new securestore.enc file to all the systems where CA AuthMinder components are installed.