Search for	Example	Results
A single word	`cat`	Topics that contain the word "cat". You will also find its grammatical variations, such as "cats".
A phrase. You can specify that the search results contain a specific phrase.	`"cat food"` (quotation marks)	Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase.

Search for	Operator	Example
Two or more words in the same topic	`AND` `and` `+` (plus symbol) `&` (ampersand)	`cat AND dog` `"cat food"+milk` `"cat food"&"dog food"`
Either word in a topic	`OR` `or` `\|` (pipe)	`cat OR dog` `cat \| dog`
Topics that do not contain a specific word or phrase	`NOT` `not` `!` (exclamation point)	`NOT cat` `! dog`
Topics that contain one string and do not contain another	`^` (caret)	`cat ^ mouse`
A combination of search types	`( )` parentheses	`cat + (dog \| mouse)` `cat \| dog + (! mouse)`

Universal CMDB11.0

Use > JMX Reference > Administration Methods > How to Set Master Keys

How to Set Master Keys

You can use the JMX console to change the master key that is used to encrypt all UCMDB keys.

Change the master key for a cluster

This method assumes that your UCMDB environment is deployed in a high-availability setup.

Caution

This method involves a restart of the entire cluster, so plan accordingly. It is recommended to change the master key of the cluster when there is little or no load on the servers. For example, you should avoid using this method during data-in operations.
Do not change any settings in the time period between changing the master key and restarting the server. Not following this instruction may result in a failure to start the server.
Machines that are not up or that will be added later to the cluster will need to be configured manually. Until they are configured, at most they can run as reader machines; trying to run them as writer machines will fail.

Back up the C:\UCMDB\UCMDBServer\conf\cmdb.conf file and the values for the following settings:
- ha.cluster.authentication.keystore.password
- ha.cluster.authentication.shared.secret
- ha.cluster.message.encryption.keystore.password
- ssl.server.keystore.password
- ssl.server.truststore.password
Make sure all the servers in the cluster are up and running.
On the writer machine, launch the Web browser and enter the following address to log in to the JMX console: https://localhost:8443/jmx-console.

Note If a load balancer is present, you must bypass it and not log on to the writer machine through a load balancer.
Do one of the following:
- Search for changeMasterKeyForCluster.
- Click UCMDB:service=Security Services > changeMasterKeyForCluster.
Enter and confirm the master key, and click Invoke. The master key will be changed first on the writer machine and then on all reader machines.
Note

The master key must contain exactly 32 characters and include at least one of each of the following four types of characters:
- Uppercase alphabetic characters
- Lowercase alphabetic characters
- Numeric characters
- Special characters: :/._+-[]
Restart all the machines in the cluster. You can use the JMX method High Availability Services > restartCluster to do this.

Note Restart the cluster immediately after changing the master key. If you do not, future database connections may fail.

Change the master key for a new machine in a cluster

If at least one of the following settings was changed, use Method A; otherwise, use Method B:

ha.cluster.authentication.keystore.password
ha.cluster.authentication.shared.secret
ha.cluster.message.encryption.keystore.password
ssl.server.keystore.password
ssl.server.truststore.password

Method A

This method assumes that you already have properly configured a master key for the writer machine that is up and running in the cluster. If not, follow the instructions in Change the master key for a cluster.

Copy the C:\UCMDB\UCMDBServer\bin\wrapper.conf file from the writer machine to the same location on the new (reader) machine.
Restart the server.

Method B

Back up the C:\UCMDB\UCMDBServer\conf\cmdb.conf file.
On the writer machine, launch the Web browser and enter the following address to log in to the JMX console: https://localhost:8443/jmx-console.
Do one of the following:
- Search for changeMasterKey.
- Click UCMDB:service=Security Services > changeMasterKey.
Enter and confirm the master key, and click Invoke.
Note The master key must contain exactly 32 characters and include at least one of each of the following four types of characters:
- Uppercase alphabetic characters
- Lowercase alphabetic characters
- Numeric characters
- Special characters: :/._+-[]
Restart the machine.

Note Restart the cluster immediately after changing the master key. If you do not, future database connections may fail.

Revert the master key for a cluster to its default value

This procedure resets the master key for an entire cluster.

Make sure all the servers in the cluster are up and running.
On the writer machine, launch the Web browser and enter the following address to log in to the JMX console: https://localhost:8443/jmx-console.

Note If a load balancer is present, you must bypass it and not log on to the writer machine through a load balancer.
Do one of the following:
- Search for restoreMasterKeyForCluster.
- Click UCMDB:service=Security Services > restoreMasterKeyForCluster.
Click Invoke. The master key will be changed first on the writer machine and then on all reader machines.
Restart all the machines in the cluster. You can use the JMX method High Availability Services > restartCluster to do this.

Note Restart the cluster immediately after changing the master key. If you do not, future database connections may fail.

Send Help Center feedback