Platform Deployment Guide › Advanced Encryption Mode › How Do I Deploy CA DataMinder In Advanced Encryption Mode? › Secure the Critical Advanced Encryption Files

Secure the Critical Advanced Encryption Files

When you deploy your CA DataMinder servers and client machines in Advanced Encryption Mode, three critical files are installed. These are keystore.dat and revocation.properties, stored in the CA DataMinder \data folder, and wigan.java.security, stored in the CA DataMinder \system folder. You must secure these files to prevent unauthorized access.

To secure the critical Advanced Encryption files

On each CA DataMinder server and client machine, you must configure Windows security for each of these critical files so that:

• Each file can be accessed only by the Windows logon account used by the CA DataMinder infrastructure service. The infrastructure service only requires Read access to these files.
• No other process on the system is permitted to access these files.