Setting up local encryption keys to embed in installation package for development environments
You can create a local encryption or decryption key file that can be embedded in a distribution (tarball). In development environments this distribution package can then be used by other users. This strategy is especially helpful when using scripts with IT automation tools such as Ansible.
The current user must have write permission to the directory where you want to generate the key files. |
Procedure
-
Specify the key file output directory when you create the encryption key with the
dsetool createsystemkey
command:For example:
dsetool createsystemkey 'AES/ECB/PKCS5Padding' 128 -d /home/jane/keys
Result: A key file
/home/jane/keys/system_key
is created. -
In the distribution tarball, create a directory for the
system key
file. Use the default location (/etc/dse/conf
) or add a new location. -
Locate the
dse.yaml
configuration file. The location of this file depends on the type of installation:-
Package installations:
/etc/dse/dse.yaml
-
Tarball installations:
<installation_location>/resources/dse/conf/dse.yaml
-
-
If you used a new location, then update the
system_key_directory
property indse.yaml
as appropriate.