Encryption Key for Document Encryption

The same encryption key is used to encrypt and decrypt database or file system documents. The digital certificate is used to generate and encrypt the keys, and the system passphrase is used to encrypt the digital certificates.

Document encryption creates one key per document and this key is stored along with the document as part of the metadata. Digital certificates are stored like any other system certificate.

The system uses a predefined certificate (doccrypto) to generate and encrypt the keys that are used to encrypt the documents. You can create a different system certificate. If you do you must update the value of CERT_NAME in the customer_overrides.properties file.