Prevent usage of 3DES keys [New in Security Center 7.0]

Disable the use of 3DES static keys on your instance with a system property.

Use the glide.security.3des.static_keys_usable system property to disable the usage of 3DES static keys on your instance. This property should be set automatically by a scheduled job, the status of which can be checked via the property glide.security.3des.removal_job_status. In cases where this property isn’t configured to false, after the scheduled job runs and the status is KEYS_DEACTIVATED, the scheduled job waits until this property is configured to false before proceeding with deletion of the 3DES static keys.

Ensure the glide.security.3des.static_keys_usable exists on the System Properties [sys_properties] table and is set to a value of false. Review KB1704481 for further information on 3DES deprecation.

More information

Attribute	Description
Configuration name	glide.security.3des.static_keys_usable
Configuration type	System Properties (/sys_properties_list.do)
Data type	Boolean
Recommended value	false
Default value	true
Fallback value	true
Category	Stored cryptography
Security risk	Severity score: 5 CVSS score: Medium 3DES is deprecated, and the use of 3DES and 3DES static keys outside of temporary backwards compatibility isn’t recommended. Continued use may lead to situations of sensitive information disclosure if a user were to obtain access to encrypted data.
Functional impact	When set to false, there may be unlikely situations where code and data residing on the instance still relied on by 3DES static keys are now inaccessible.
Dependencies and prerequisites	None

To learn more about adding or creating a system property, see Add a system property.