Previous Topic: How to Restrict CAFT Commands

Next Topic: policy_setting Options

Install the CAM and CAFT Encryption Key

Encryption is supported for Win32, AIX, HP-UX, Solaris, and Linux x86 applications. The default and only available encryption algorithm is Triple-DES (168 bits key) with CBC mode.

To install the encryption key

  1. Enter the following command at the command prompt to generate your key file:
    #PATH=`cat /etc/catngcampath`/bin:$PATH
    
    	#export PATH
    #caftkey -g keyfile password
    
    keyfile

    Name that you assign to the key file.

    password

    Password that you assign to the key file.

    Note: The caftkey command and attributes are the same for Win32 platforms.

  2. Install your Public Key on both CAFT Agent and CAFT Admin boxes using the previously-generated key file by entering the following command at the command prompt:
    #PATH=`cat /etc/catngcampath`/bin:$PATH
    	#export PATH
    #caftkey -policy_setting keyfile password
    
    keyfile and password

    The values that you specified in Step 1.

    -Policy_setting

    -i, -m, or blank.

    More information:

    policy_setting Options

  3. Recycle the CAM Service on each box where you installed the new Key by stopping the CAM service, and starting it again:
    prompt> camclose              //stop Cam/Caft service and processes
    prompt> cam start             //start CAM service and process