Installation and Upgrade Guides › SiteMinder Upgrade Guide › Using FIPS-Compliant Algorithms › How to Re-Encrypt Existing Sensitive Data › Re-encrypt Policy and Key Store Data › Options for Re-encrypting Policy and Key Store Data

Options for Re-encrypting Policy and Key Store Data

There are three ways to re-encrypt policy and key store data. You can:

• Re-encrypt the policy and key store data in an existing policy store.
• Re-encrypt policy data in an existing policy store and key data in an existing key store.
• Re-encrypt the policy and key store data, and migrate the data into a new r12.0 SP2 policy store or policy and key store, respectively.

This guide details the steps for re-encrypting the policy and key store data for existing stores.

If you want to create a new r12.0 SP2 policy store or policy and key store:

1. Export the key data using smkeyexport.

   Note: XPSExport does not export keys that are stored in a policy or key store. More information on using smkeyexport exists in the Policy Server Administration Guide.

2. Export the policy store data using XPSExport.

   Note: More information on using XPSExport exists in the Policy Server Administration Guide.

3. Create an r12.0 SP2 policy store or policy and key store.

   Note: More information on creating a policy and key stores exists in the Policy Server Installation Guide.

4. Import the key data into the new policy store, or if created, the new key store using smkeyimport.

   Note: More information on using smkeyimport exists in the Policy Server Administration Guide.

5. Import the policy store data into the new policy store using XPSImport.

   Note: More information on using XPSImport exists in the Policy Server Administration Guide.