Use > Hardening > Confidential Manager > Encryption Properties

Encryption Properties

The following table describes encryption properties. For details on using these parameters, see Configure the Universal CMDB Server.

Parameter

Description Recommended value
encryptTransportMode

Encrypt the transported data:

true false

true
encryptDecryptInitString Password for encryption Longer than 8 characters
cryptoSource

Encryption implementation library to use:

  • lw
  • jce
  • windowsDPAPI
  • lwJCECompatible
lw
lwJCEPBECompatibilityMode

Support previous versions of lightweight cryptography:

  • true
  • false
true
cipherType

The type of cipher that Confidential Manager uses. Confidential Manager supports one value only:

symmetricBlockCipher

symmetric BlockCipher
engineName
  • AES
  • Blowfish
  • DES
  • 3DES
  • Null (no encryption)
AES
algorithmModeName

Mode of block encryption algorithm:

  • CBC
CBC
algorithmPaddingName

Padding standards:

  • PKCS7Padding
  • PKCS5Padding
PKCS7Padding
keySize Depends on algorithm (what engineName supports) 256
pbeCount

The number of times to run the hash to create the key from encryptDecryptInitString.

Any positive number.

1000
pbeDigestAlgorithm

Hashing type:

  • SHA1
  • SHA256
  • MD5
SHA256
encodingMode

ASCII representation of the encrypted object:

  • Base64
  • Base64Url
Base64Url
useMacWithCrypto

Defines whether MAC is used with the cryptography:

  • true
  • false
false
macType

Type of message authentication code (MAC):

  • hmac
hmac
macKeySize SHA256 Depends on Mac algorithm 256
macHashName

The Hash Mac algorithm:

  • SHA256
SHA256