Configure the Confidential Manager Client’s Cache Encryption Settings on the Probe

This procedure describes how to change the encryption settings of the Confidential Manager client's file system cache file. Note that changing the encryption settings for the Confidential Manager client's file system cache causes the file system cache file to be recreated. This recreation process requires restarting the Probe and full synchronization with the UCMDB Server.

1. On the Probe machine, launch the Web browser and enter the following address: https://localhost:8453.

   Note If the Probe Manager and the Probe Gateway are running as separate processes, the address should be entered on the machine that is running the Probe Manager as follows: https://localhost:8454.

2. Click type=CMClient to open the JMX MBEAN View page.

3. Update the following cache-related settings:

   Note Some of the methods that you update on the Probe may require more than one parameter. To see the current probe configuration, click displayCacheConfiguration in the JMX MBEAN View page.

   1. setCacheInitString changes the file system cache <encryptDecryptInitString> setting.

   2. setCacheEncryptionAlgorithm changes the file system cache settings according to the following map:

      • Engine name refers to the <engineName> entry

      • Key size refers to the <keySize> entry

      • Algorithm padding name refers to the <algorithmPaddingName> entry

      • PBE count refers to the <pbeCount> entry

      • PBE digest algorithm refers to the <pbeDigestAlgorithm> entry

   3. setCacheEncryptionLibrary changes the cache file system settings according to the following map:

      • Encryption Library name refers to the <cryptoSource> entry

      • Support previous lightweight cryptography versions refers to the <lwJCEPBECompatibilityMode> entry

   4. setCacheMacDetails changes the cache file system settings according to the following map:

      • Use MAC with cryptography refers to the <useMacWithCrypto> entry

      • MAC key size refers to the <macKeySize> entry

4. Click the reloadCacheConfiguration button to make the changes effective on the Probe. This causes the Probe to restart.

   Note Make sure that no job is running on the Probe during this action.

For details about the different settings and their possible values, see Confidential Manager Encryption Settings.