Policy Server Guides › Policy Server Administration Guide › Configuring and Managing Encryption Keys › Manage Agent Keys › Change Static Keys

Change Static Keys

You can change the static Agent key used by SiteMinder Web Agents to encrypt identity information for certain SiteMinder features.

Important! Changing the static key is not recommended because the change can cause some SiteMinder features to lose the data they require to function properly. Features that establish and use an identity stored in a persistent cookie will no longer work. Change the static key only in extreme situations such as security breaches. Authenticated users may be forced to login again before single sign-on will function across multiple SiteMinder installations.

A static key may also be used to maintain a single sign-on environment in an environment that requires multiple Policy Servers and multiple master key stores.

To change the static key

1. Log into the Administrative UI.
2. From the Administration tab select Policy Server, Key Management.

   The Key Management pane opens.

3. In the Agent Key group box, select Use Static Key.

   The pane changes to support static keys.

4. Do one of the following:
   • In the Generate a random key group box, click Rollover Now to make the Policy Server generate a new random static key.
   • In the Specify an Agent key group box, enter a static key by setting the following fields:

     Static key

     Specify a value that the Policy Server uses as the static key. Use this option in situations where two key stores must use the static key to maintain a single sign-on environment.

     Confirm key

     Re-enter the static key.

5. Click Rollover Now.

   Depending on the option you selected, the Policy Server generates a new static key or uses the one you specified. The static key rolls over within three minutes.

6. Click Submit to save your changes.