Setting up local encryption keys to embed in installation package for development environments
You can create a local encryption or decryption key file that can be embedded in a distribution (tarball). In development environments this distribution package can then be used by other users. This strategy is especially helpful when using scripts with IT automation tools such as Ansible.
|
The current user must have write permission to the directory where you want to generate the key files. |
Procedure
-
Specify the key file output directory when you create the encryption key with the
dsetool createsystemkeycommand:For example:
dsetool createsystemkey 'AES/ECB/PKCS5Padding' 128 -d /home/jane/keysResult: A key file
/home/jane/keys/system_keyis created. -
In the distribution tarball, create a directory for the
system keyfile. Use the default location (/etc/dse/conf) or add a new location. -
Locate the
dse.yamlconfiguration file. The location of this file depends on the type of installation:-
Package installations:
/etc/dse/dse.yaml -
Tarball installations:
<installation_location>/resources/dse/conf/dse.yaml
-
-
If you used a new location, then update the
system_key_directoryproperty indse.yamlas appropriate.
