Changing the encryption keys

You can change the keys that WebSphere Automation uses to encrypt data.

About this task

This procedure interrupts normal operation of WebSphere Automation. Individual components are stopped and restarted.

No data loss occurs. Instead, this procedure decrypts the existing data using the current encryption key, and then encrypts and stores the data using a new encryption key.

Use this procedure each time that you want to change the data encryption keys.

Procedure

  1. If necessary, create the following environment variables with the installer image name and the version. 
    export CASE_NAME=<YOUR_CASE_NAME>
export CASE_VERSION=<YOUR_CASE_VERSION>
    To find the CASE name and version, see IBM: Product CASE to Application Version External link icon. For WebSphere Automation:
    • <YOUR_CASE_NAME> is ibm-websphere-automation
    • <YOUR_CASE_VERSION> is the same as the product version (1.13.0).
  2. Run the following command to invoke the rotateEncryptionKeys action: 
    oc ibm-pak launch $CASE_NAME \
 --version $CASE_VERSION \
 --inventory automationOperator \
 --action rotateEncryptionKeys \
 --namespace <WSA_instance_namespace>

    Where <WSA_instance_namespace> is the instance namespace where WebSphere Automation is installed.