How to Encrypt/Decrypt IP Ranges Information on the Probes

The domain_encrypt attribute in the domainScopeDocument.xml file acts as a flag to tell the probe whether to encrypt or decrypt the IP ranges related information in the domainScopeDocument.xml and domainRangesDocument.xml files on the Data Flow Probe. There is no need to manually modify the attribute. You can invoke the new JMX method setDomainEncrypt to control this attribute.

To encrypt/decrypt IP ranges information on the probe:

1. On the UCMDB server, launch the Web browser and enter the following address: https://localhost:8443/jmx-console

   You may have to log in with a user name and password.

2. Locate UCMDB:service=Discovery Manager and click the link to jump to the Operations table.

3. Click the setDomainEncrypt operation.

4. To encrypt the IP ranges related information in the domainScopeDocument.xml and domainRangesDocument.xml files on all the Data Flow Probes connected to this UCMDB Server, provide customer ID (default: 1) and select True.

   Note By default, the IP ranges related information in the domainScopeDocument.xml and domainRangesDocument.xml files are not encrypted.

   To decrypt the encrypted IP ranges information, provide customer ID and select False.

5. Click Invoke.

   The domain_encrypt attribute value in the domainScopeDocument.xml is successfully changed.

   Then the Probes connected to the UCMDB server will encrypt or decrypt IP ranges related information in the domainScopeDocument.xml and domainRangesDocument.xml accordingly. Specifically, the following will be encrypted/decrypted:

   • The following sections containing IP ranges information in domainScopeDocument.xml: domain_probes, domain_scopelist, and domain_probeclusters

   • All content in the root element DomainsRangeDocument in domainRangesDocument.xml.