Implementation Guide › Changing Communication Encryption Methods › Symmetric Encryption › Change the Symmetric Encryption Key

Change the Symmetric Encryption Key

Symmetric encryption keys protect communication between CA Access Control components. You use the sechkey utility to change the symmetric encryption keys. You can use sechkey in interactive or non-interactive mode.

Before you change the symmetric encryption key, note the following limitations:

• The password must be 1-55 characters long
• The password must not contain high ASCII characters
• The password must not contain double quotes ( " )

You must have the ADMIN attribute to use sechkey.

Important! To avoid communication problems, use the same encryption key on all computers that run CA Access Control components.

To change the symmetric encryption key

1. Stop CA Access Control.

   If you are changing the encryption settings on a CA Access Control Enterprise Management server, also stop the CA Access Control Web Service.

2. Run the sechkey utility in interactive mode:

   sechkey
   

   The utility prompts you to enter the existing key and the new key, and changes the symmetric encryption key.

3. Start CA Access Control.

   If you are changing the encryption settings on a CA Access Control Enterprise Management server, also start the CA Access Control Web Service.

   CA Access Control starts and encrypts communication with the new encryption key.

Example: Change the Symmetric Encryption Key in Non-interactive Mode

The following example changes the default CA Access Control symmetric key to a new key with the value newkey:

sechkey -d newkey

Note: For more information about the sechkey utility, see the Reference Guide.

More information:

sechkey Utility—Change a Symmetric Encryption Key