Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

When the Process Flow logs executes, all the temporary files are stored in the repository folder. For security reasons, you may want to secure your logs repository folder from an unauthorized access. Adeptia facilitates you to secure your logs repository by encrypting the data at rest. With this feature, your logs get repository gets stored in an encrypted form.

...

Creating Keystore using Keytool

  1. Open Command Prompt (press Win + R and type cmd).
  2. Go to the directory where JRE is installed (for example, C:/Program Files/Java/jre8/bin).
  3. Run the following Keytool command to create a Keystore.

    For Windows:

    keytool.exe -genseckey -keystore <Keystore_path> -storetype jceks <store_type> -storepass <Keystore_password> -keyalg AES -keysize 256 -alias <alias_name> -keypass <Key_password>

    For Linux:

    keytool -genseckey -keystore <Keystore_path> -storetype <store_type> -storepass <Keystore_password> -keyalg AES -keysize 256 -alias <alias_name> -keypass <Key_password>

    where,
              genseckey is the Generate SecretKey. This is the flag indicating the creation of a synchronous key which will become AES key.          keystore is <Keystore_path> is the location of the Keystore. If the Keystore does not exist, the tool will create a new store. 

              storetype is <store_type> is the type of store, for example, JCE, PK12, JCEKS. Only JCEKS is supported.

              storepass is <Keystore_password> is the password related to the Keystore. 

              keyalg is the algorithm used to create the key, for example, AES, DES.

              keysize is the size of the key.

              alias <alias_name> is the name to be given to the newly created key in which to reference when using the key.

              keypass <Key_password> is the password protecting the use of the key.    

    Exit from the Command Prompt.

    The Keystore is generated at the specified location.  

  4. Exit from the Command Prompt.

Configuring Keystore in Adeptia Suite

  1. Login to Adeptia Suite as an administrator.
  2. Go to Administer > Setup > Application Settings > Update System Properties.
  3. Expand Systems > Data Encryption at RESTrest.
  4. Set the value in the below parameters:

    Property NameDescription
    abpm.security.data.encryption.rest.enableTo enable or disable data encryption at rest. The possible value can be Yes or No.
    abpm.security.data.encryption.rest.keystoreLocationLocation of the Keystore that will be used for data encryption.
    abpm.security.data.encryption.rest.aliasAlias name for the key.
    abpm.security.data.encryption.rest.keystorePaswordKeystore password
    abpm.security.data.encryption.rest.keyPasswordKey password
  5. Click Save to save the changes.
  6. Click Reload Configuration to reflect the changes.
  7. Restart Kernel and WebRunner.

...

You can encrypt or decrypt the files of a folder repository using Encryption Utility. To encrypt or decrypt, you need to configure the encryption properties in the encryption-info.properties file.

To encrypt or decrypt a folder,:

  1. Extract the Encryption_Utility.zip file in the bin folder where Adeptia Suite is installed, for example, C:/Program Files/Adeptia Suite SQL/AdeptiaSuite-6x.6x/bin/Encryption_utility.
  2. Open the extracted folder.
  3. Open encryption-info.properties file in any Text Editor.
  4. Provide the values for the following properties.

    Property Name
    Description
    encryption.repository.pathPath of the folder to encrypt or decrypt. If you are using the utility in the Windows environment, separate the path by either using a backward slash "\\" (CD:\\Users\\Smith\\Desktop\\encrypt) or forward slash "/" (CD:/Users/Smith/Desktop/encrypt).
    encryption.keystore.locationKeystore location. If you are using the utility in the Windows environment, separate the path by either using a backward slash "\\" (CD:\\Users\\Smith\\Desktop\\encrypt) or forward slash "/" (CD:/Users/Smith/Desktop/encrypt).
    encryption.keystore.aliasAlias name for the Keystore.
    encryption.key.passwordPassword of the key.
    encryption.keystore.passwordPassword of the Keystore.

     

  5. Save the file.
  6. Go to the extracted folder. 
  7. For Windows, double-click encrypt.bat.
    For Linux, execute encrypt.sh on the Terminal.
    The utility starts running.
  8. To encrypt the folder, press 1.
    To decrypt the folder, press 2.



  9. The utility starts encrypting or decrypting the folder. A message appears message "Encryption or Decryption has successfully completed" indicates successful encryption or decryption.