Previous Topic: EncryptionNext Topic: Environmental Variables


Change the Encryption Key After Installation

Use the keygen utility to change the agent encryption key after the installation is complete. The keygen utility that is provided with the agent lets you encrypt a key. AES is the only supported cipher algorithm.

The command has the following format:

keygen 0xkey cipher destination
key

Specifies the 32 or 64 hexadecimal characters (0-9, A-F) that form one of the following encryption keys:

This data must match the same key that is defined on the agent side so that the scheduling system and the agent encrypt the data with the same key.

cipher

Specifies the cipher algorithm. This value must be AES.

AES is the only valid option for almost all agents when used with CA Workload Automation CA 7 Edition. The only exception is for the CA WA Agent for HP Integrity NonStop, which does not currently support encryption. If you are using the HP Integrity NonStop agent, use a value of NONE instead.

destination

(Optional) Specifies the name of a text file in the installation directory that stores the encryption key. The default file name is cryptkey.txt.

The following is a sample command:

keygen 0x0102030405060708090A0B0C0D0E0F00 AES

If you change the encryption key on the agent side, recycle the agent to make the new key effective. If the change is made on the CA WA CA 7 Edition side, the command /IAS,FUNC=RECONFIG rereads the Agent and Encryption key files to set up the new configuration.