Set up Unbound Technology keys

Use Unbound Technology (previously Dyadic Security) keys with Edge Encryption by storing the base64-encoded wrapped encryption key as text file on the Edge Encryption proxy server and providing the wrapping key alias. The Unbound Technology implementation maintains control of the wrapping key.

시작하기 전에

Role required: security_admin

In your Unbound Technology implementation, identify both the wrapping key and the wrapped key. Use the RSA/ECB/OAEPWITHSHA-256ANDMGF1PADDING algorithm for wrapping and padding. Export the wrapped key in base64-encoded text format. Save the file using the key alias as the name with no file extension.

주:

If using Unbound Technology encryption keys with Edge Encryption, install the proxy server using the command line installer on the Unbound client machine. The Edge Encryption proxy server must run on the same machine as the Unbound technology client.

프로시저

1. Add the wrapped encryption key in base64-encoded text format to the <proxy-installation-directory>/keys directory.
   The name of the file must be the key alias with no file extension.
2. Update the edgeencryption.properties file.
   1. Change to the <proxy-installation-directory>/conf directory.
   2. Open the edgeencryption.properties file.
   3. Enter the File store properties and set the value of edgeencryption.keyfile.directory to keys.

      This property directs the proxy server to look for the encryption key in the <Java-home-directory>/keys directory.

      For more information on Edge Encryption properties, see Edge Encryption proxy server properties.

   4. Uncomment the properties for the Dyadic provider configuration and set the value of edgeencryption.ekm.provider.rsa.wrapping.key.alias to the wrapping key alias in your Unbound implementation.
   5. Save and close the file.

다음에 수행할 작업

Add the encryption key alias to the instance. The encryption key alias is the file name of the wrapped encryption key added to the <proxy-installation-directory>/keys directory. For example, if the file in the directory is named myunboundkey, add this name to the Key alias field. See Configure encryption keys on the instance.