Policy Server Guides › Policy Server Administration Guide › Configuring and Managing Encryption Keys › Reset the r12.x Policy Store Encryption Key

Reset the r12.x Policy Store Encryption Key

To reset the r12.x policy store encryption key

1. Log into the Policy Server host system.
2. Run the following command:

   XPSExport output_file -xa -xs -xc -passphrase passphrase
   

   • output_file

     Specifies the name of the XML file to which the policy store data is exported.

   • -xa

     Specifies that all policy store data be exported.

   • -xs

     Specifies that security data be exported.

   • -xc

     Specifies that configuration data be exported.

   • -passphrase passphrase

     Specifies the passphrase that is required for the encryption of sensitive data.

     Limits: The passphrase must:

     • Be at least eight characters long
     • Contain at least one uppercase and one lowercase character
     • Contain at least one numeric digit

       Note: If the passphrase contains a space, enclose the passphrase with quotes.

   The utility exports the policy store data to the XML.

3. Be sure that the smreg utility is located in policy_server_home\bin.
   • policy_server_home

     Specifies the Policy Server installation path.

   Note: If the utility is not present, you can find the utility in the Policy Server installation media, which is available on the Support site.

4. Run the following command:

   smreg -key encryption_key
   

   • encryption_key

     Specifies the new encryption key.

     Limits: 6 to 24 characters.

   The utility changes the policy store encryption key.

5. Run the following command:

   XPSImport input_file -fo -passphrase passphrase
   

   • input_file

     Specifies the name of the XML file that contains the exported policy store data.

   • -fo

     Allows existing policy store data to be overwritten.

   • -passphrase passphrase

     Specifies the passphrase required for the decryption of sensitive data.

     Important! If the passphrase does not match the passphrase entered during the policy store export, sensitive data cannot be decrypted and the import fails.

   The utility imports the policy store data.

   The policy store encryption key is reset.