Version you are viewing: Zoomdata v3

Zoomdata v4

Zoomdata v5

Changing the Encryption Mode

You can change the encryption mode used by Zoomdata (for example to change from AES to AES/CBC/PSCS5Padding encryption).

We recommend that you change the encryption mode used by Zoomdata with the assistance of Logi ZoomdataTechnical Support.
If you are upgrading to a newer version of Zoomdata and you also want to change your encryption mode, perform the upgrade first and then complete the steps described here.

You must have system administration privileges to change the encryption mode.

You must have the full-strength Java Cryptography Extension (JCE) installed in your Java virtual machine (it's not there by default). You can download the JCE Unlimited Strength Jurisdiction Policy Files from Oracle at the following link: https://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html.

See also Encrypting Configuration Properties.

To change the encryption mode:

  1. Start the Zoomdata microservice. This will populate the Zoomdata database using the original encryption (for example AES). See Starting Zoomdata Services.

  2. Stop the Zoomdata microservice. See Stopping Zoomdata Services.

  3. Back up the Zoomdata database. See Backing Up and Restoring the Metadata Store.

  4. Modify the following encryption properties in the zoomdata.properties file: security.encryption.algorithm and security.encryption.key.algorithm. For example:

    security.encryption.algorithm=AES/CBC/PSCS5Padding
    security.encryption.key.algorithm=AES

    See zoomdata.properties Properties.

  5. Start the Zoomdata microservice. Zoomdata will start using the new properties and the new encryption method. See Starting Zoomdata Services.