Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Process Flow logs are stored in the repository folder. For security reasons, you may want to secure your logs from unauthorized access. Adeptia Connect facilitates you to secure your logs using Encryption at REST feature. With this feature, your logs are stored in the encrypted form. To decrypt the logs, you need to encrypt using the key. To encrypt your logs, you need to do the following:

  • Create Keystore using Keytool
  • Configure Keystore in Adeptia Suite

Creating Keystore using Keytool

  1. Open Command Prompt (press Win + R and type cmd).
  2. Go to the directory where JRE is installed (for example, C:/Program Files/Java/jre8/bin).
  3. Run the following Keytool command to create a Keystore.

    keytool -genseckey -keystore <Keystore_path> -storetype jceks -storepass <Keystore_password> -keyalg AES -keysize 256 -alias <alias_name> -keypass <Key_password>

    where,
              genseckey is the Generate SecretKey. This is the flag indicating the creation of a synchronous key which will become AES key.

              keystore is the location of the Keystore. If the Keystore does not exist, the tool will create a new store. 

              storetype is the type of store (JCE, PK12, JCEKS, etc). JCEKS is used to store symmetric keys (AES) not contained within a certificate.

              storepass is the password related to the Keystore. 

              keyalg is the algorithm used to create the key (AES/DES/etc).

              keysize is the size of the key.

              alias is the name given to the newly created key in which to reference when using the key.

              keypass is the password protecting the use of the key.  

      

  4. Exit from the Command Prompt.

Configuring Keystore in Adeptia Suite

  1. Login to Adeptia Suite.
  2. Go to Administer > Setup > Application Settings > Update System Properties.
  3. Expand Systems > Data Encryption at REST.
  4. Set the value in the below parameters:

    Property NameDescription
    abpm.security.data.encryption.rest.enableTo enable or disable REST.
    abpm.security.data.encryption.rest.keystoreLocationLocation of the Keystore that will be used for data encryption.
    abpm.security.data.encryption.rest.aliasAlias name for the key.
    abpm.security.data.encryption.rest.keystorePaswordKeystore password
    abpm.security.data.encryption.rest.keyPasswordKey password
  5. Click Save to save the changes.
  6. Click Reload Configuration to reflect the changes.

...