Replication Server 15.0 uses the FIPS-certified Advanced Encryption Standard (AES) algorithm to encrypt new Replication Server user passwords. The AES alogrithm uses the 128-bit encryption key and can be obtained from the Certicom Security Builder library.
Use the information in Table 8-3 to migrate existing encrypted passwords in the Replication Server configuration file, and the rs_users and rs_maintusers tables.
To |
Command |
|---|---|
Migrate existing user passwords to the new alogrithm |
alter user user set password password where:
|
Migrate existing database maintenance user passwords to the new algorithm |
alter connection to data_server.database set password to password where password is the existing password you want to encrypt using the new alogorithm. |
Migrate existing route user passwords to the new algorithm |
alter route to dest_replication_server set password to passwd where:
|
Migrate existing user passwords in the configuration file to the new algorithm |
Use rs_init to encrypt the passwords using the new algorithm. |
To fully support the new password encryption algorithm, both the Replication Server and the rs_init utility must have a site version of 15.0. If the site version is lower than 15.0, an error message displays and encryption is disabled.
