Use > Hardening > Introduction to Hardening > System Access > How to Upgrade to AES 256 Mode

How to Upgrade UCMDB to AES 256 Mode

This release introduced a new security mode AES 256 for better data security. You can upgrade UCMDB server to the AES 256 security mode if necessary.

Caution  

  • In this release, after upgrading UCMDB server to the AES 256 mode,

    • Connecting UCMDB server to a new database or updating the existing UCMDB data schema is NOT supported.
    • Downgrading UCMDB server back to the original AES encryption mode is NOT supported.
  • After upgrading UCMDB server to the AES 256 mode, to access UCMDB UI by web browser, the JRE of the web browser applet should support AES 256 encryption as well. If not, make sure you upgrade the JRE of web browser applet by downloading the latest JRE.
  • In high availability (HA) mode,

    • You can only upgrade UCMDB to the AES 256 mode on the writer server.
    • After upgrading the HA system to the AES 256 mode, any newly added reader server can be automatically upgraded to the AES 256 mode during their first startup.

To upgrade UCMDB server to the AES 256 security mode, do the following:

  1. Prerequisites

    • (High availability environment) Make sure you stop all the reader servers.
    • Back up the following:

      • UCMDB database
      • The whole UCMDB Server installation directory
  2. Upgrade UCMDB server to the AES 256 security mode.

    1. On the UCMDB writer server, go to the JMX console, locate the enableAES256Mode operation under the UCMDB:service=Security Services category.
    2. Click Invoke.
    3. Restart the UCMDB writer server.
    4. (High availability mode) Restart all the reader servers after the writer server is up.