Database encryption

When you deploy Maximo® Manage, fields that require security, such as passwords and API keys, are encrypted or reencrypted to provide security.

Database encryption overview
When you configure Maximo Manage, specify encryption keys and encryption algorithms to determine how the fields that require security are encrypted.
Database encryption scenarios
Your deployment scenario determines your encryption and reencryption options. Scenarios include deploying a new database, deploying a previously encrypted database, or changing the encryption keys for deployment.
Viewing database encryption history
You can view the history for database encryption. If you encrypt or reencrypt the database, a new entry is logged in the syschangetracker table in the Maximo database.
Disabling automatic generation of encryption keys
By default, if encryption keys are not specified when you activate Maximo Manage with a fresh database, new encryption keys are automatically generated. If you do not want to automatically generate encryption keys, set the autoGenerateEncryptionKeys property to false.
Adding encryption key secrets
For a new installation, the encryption secret is used as the key to encrypt the database. For already encrypted databases, the encryption secret is used to restore the encryption keys in the future.
Resetting the Crypto and CryptoX fields in the database
If you lose your Crypto and CryptoX encryption keys, you can run a reset script that clears the Crypto and CryptoX fields in the Maximo Manage database. Then, you can restart the server and reset your data.