Previous Topic: acuxchkey Utility—Change Encryption Key SettingsNext Topic: dbmgr Utility


ChangeEncryptionMethod Utility—Change Encryption Method

Valid on UNIX

The ChangeEncryptionMethod utility changes the encryption methods.

Note: This utility is supplied as a script file and is located in the lbin directory.

When you run this utility, you can choose one of the following encryption methods:

If you do not specify an encryption method, the utility prompts you for it. The utility searches for existing Policy Models in the system, decrypts them by running "sepmd -de pmd_name", and then changes the encryption method by linking libcrypt to the new shared library: libaes128, libaes192, libaes256, libdes, libtripledes, or libscramble.

Note: To run this utility, CA ControlMinder must be running. To change the encryption method, the script asks you whether it can temporarily shut down CA ControlMinder.

Important! Verify that you use identical encryption methods on the CA ControlMinder Enterprise Management sever and on the CA ControlMinder endpoints. All password history will be lost if you select to change the encryption method of existing CA ControlMinder endpoints.

This command has the following format:

ChangeEncryptionMethod.sh [DES|TRIPLEDES|SCRAMBLE|AES128|AES192|AES256]

More information:

sechkey Utility—Change the Symmetric Encryption Method