When to Regenerate the CSA Encryption Keystore or Encrypted Symmetric Key

You should not regenerate the CSA encryption keystore or encrypted symmetric key unless one of the following occurs:

• The CSA encryption keystore or encrypted symmetric key was deleted and is not recoverable.
• The CSA encryption keystore or encrypted symmetric key was regenerated and the original file is not recoverable.
• The CSA encryption keystore password is not retained.

Locate your situation in the table below and perform the tasks starting at the listed step.

Situation	Start at:
Lost CSA encryption keystore	Step 1
Lost encrypted symmetric key	Step 2
Regenerated CSA encryption keystore	Step 1
Regenerated encrypted symmetric key	Step 3
Forgotten CSA encryption keystore password	Step 1

Tasks to perform:

1. Regenerate the CSA encryption keystore (see Create a CSA Encryption Keystore).
2. Regenerate the encrypted symmetric key (see Generate an Encrypted Symmetric Key).
3. Encrypt CSA passwords (see Re-Encrypt CSA Passwords).
4. Configure CSA properties (see Configure CSA Properties). As applicable, update the keystore, keyAlias, encryptedKeyFile, and csaTruststorePassword property values.

5. Reset the password for every organization's LDAP access point:

   Update the passwords for the following users in the CSA_ACCESS_POINT table in the database.

   1. Open an SQL client to your database.
   2. Run the following: update CSA_ACCESS_POINT set password=null;

   3. Launch the Cloud Service Management Console by typing the following URL in a supported Web browser: https://<csahostname>:8444/csa where <csahostname> is the fully‑qualified domain name of the system on which the Cloud Service Management Console resides.

   4. Log in to the Cloud Service Management Console as the CSA Administrator.

   5. Click the Administration tile.

   6. In the left-navigation frame, select an organization.
   7. From the organization's navigation frame, select LDAP.
   8. Enter the password in the Password and Retype Password fields.
   9. Click Save Changes.
   10. Repeat steps f - i for every organization.

See Restart CSA for detailed information on how to restart CSA.