Installation and Upgrade Guides › SiteMinder Upgrade Guide › Using FIPS-Compliant Algorithms › How to Re-Encrypt Existing Sensitive Data › Re-encrypt a Policy Store Key

Re-encrypt a Policy Store Key

You re-encrypt the policy store key to replace the existing key with a version that is encrypted using FIPS-compliant algorithms.

To re-encrypt the policy store key

1. Open a command prompt from the computer hosting the Policy server and run the following command:

   smreg -cf MIGRATE -key key_value
   

   • -cf MIGRATE

     Specifies that smreg run in FIPS-migration mode.

     Note: When smreg runs in FIPS-migration mode, the policy store key is re-generated using FIPS-compliant algorithms.

   • -key key value

     Specifies the current policy store key.

   smreg generates a new policy store key and encrypts it using FIPS-compliant algorithms.

2. Open the EncryptionKey.txt file, and verify that a new encryption key is present and prefixed with a FIPS-compliant algorithm.

   Prefix example: {AES}

   The policy store key is re-encrypted.

3. Repeat the latter steps for each Policy Server in the environment.

You may now re-encrypt the policy store administrator password.