Policy Server Guides › Policy Server Management Guide › Configuring and Managing Encryption Keys › Manage Agent Keys › Change Static Keys

Change Static Keys

Although it is not recommended, you can change the static key used by SiteMinder Web Agents to encrypt identity information for certain SiteMinder features.

A static key may also be used to maintain a single sign-on environment in an environment that requires multiple Policy Servers and multiple master key stores.

Important! Changing the static key will cause some SiteMinder features to lose the data they require to function properly. Features that establish and use an identity stored in a persistent cookie will no longer work. Changing the static key is not recommended, except in extreme situations such as security breaches. Authenticated users may be forced to login again before single sign-on will function across multiple SiteMinder installations.

To change the static key

1. Log into the Policy Server User Interface.
2. From the menu bar of the SiteMinder Administration window, select Tools, Manage Keys.

   The the SiteMinder Key Management dialog box opens.

3. In the Agent Key tab, select the Use Static Key radio button.

   The SiteMinder Key Management dialog box changes to support static keys.

4. Do one of the following:
   • Generate a random key--Click the Rollover Now button in this group box to make the Policy Server generate a new random static key.
   • Specify a key--Enter a static key in this group box as follows:

     Static key--Specify a value for this field that the Policy Server uses as the static key. Use this option in situations where two key stores must use the static key to maintain a single sign-on environment.

     Confirm key--Re-enter the static key in this field then click Rollover Now.

   Depending on the option you selected, the Policy Server generates a new static key or uses the one you specified. The static key rolls over within three minutes.

5. Do one of the following:
   • To save your changes, click Apply.
   • To save your changes and return to the SiteMinder Administration window, click OK.
   • To return to the SiteMinder Administration window without saving your changes, click Cancel.

   Note: Click Cancel if you changed the static key, but you want to continue using dynamic Agent key rollover.

More information:

Static Keys

Multiple Policy Stores with Separate Key Stores

Coordinate Agent Key Management and Session Timeouts