Data Encryption at REST

You need to configure the following:

Set the Keytool command:

1. Open Command Prompt (press Win + R and type cmd).
2. Go to the directory where JRE is installed (for example, C:/Program Files/Java/jre8/bin).

3. Run the following Keytool command to create a Keystore.

   keytool -genseckey -keystore <Keystore_path> -storetype jceks -storepass <Keystore_password> -keyalg AES -keysize 256 -alias <alias_name> -keypass <Key_password>

   where,
             genseckey is the Generate SecretKey. This is the flag indicating the creation of a synchronous key which will become our AES key.

             keystore is the location of the Keystore. If the Keystore does not exist, the tool will create a new store. Paths can be relative or absolute but must be local.

             storetype is the type of store (JCE, PK12, JCEKS, etc). JCEKS is used to store symmetric keys (AES) not contained within a certificate.

             storepass is the password related to the keystore. Highly recommended to create a strong passphrase for the keystore.

             keyalg is the algorithm used to create the key (AES/DES/etc).

             keysize is the size of the key (128, 192, 256, etc).

             alias is the namealias given to the newly created key in which to reference when using the key.

             keypass password protecting the use of the key.    

4.