Disabling automatic generation of encryption keys
By default, if encryption keys are not specified when you activate Maximo® Manage with a fresh database, new encryption keys are automatically generated. If you do not want to automatically generate encryption keys, you can set the autoGenerateEncryptionKeys property to false.
About this task
The autoGenerateEncryptionKeys property controls whether encryption keys are automatically generated when you activate Maximo Manage with a fresh database. By default, this property is set to true, and encryption keys are automatically generated if no value is specified for them. You can set the property to false if you do not want to generate keys automatically. If you set the autoGenerateEncryptionKeys property to false and you do not provide encryption keys, deployment fails, and you receive an error message that the property is set to false and encryption keys are missing.
If encryption keys are automatically generated, you can easily lose track of them, especially in development and test environments where databases are reused. If you set the autoGenerateEncryptionKeys property to false, users are forced to enter the key. Users are more likely to keep track of the keys and less likely to lose them.
Note that this property takes effect when you activate the application by using an API call. If you update the property for an instance that is already activated, the property does not take effect until you make a change that is related to the encryption keys, for example, when you delete keys to trigger reencryption.
Procedure
- In the Red Hat® OpenShift® console, in the Administration section, select Custom Resource Definitions.
- In the CustomResourcesDefinitions window, select the ManageWorkspace custom resource definition record.
- In the CustomResourceDefinition details window, on the Instances tab, select the instance for which you want to disable automatic generation of encryption keys.
- On the YAML tab for the instance, in the spec.settings.deployment.autoGenerateEncryptionKeys section, specify false.
- Save the custom resource.