Siebel Security Guide > Communications and Data Encryption >

Implementing Siebel Strong Encryption

Siebel Strong Encryption is installed during the Siebel Enterprise and Siebel Web Server installations. However, there are various tasks you must perform to use Siebel Strong Encryption. This topic describes these tasks. For an overview of Siebel Strong Encryption, see About Siebel Strong Encryption.

NOTE:  Siebel Strong Encryption is only available in U.S. English (enu); however, it can be implemented in a Siebel environment that uses other languages.

Requirements for Implementing Siebel Strong Encryption

Before implementing Siebel Strong Encryption, carry out the following tasks:

• Install and configure a Siebel Enterprise.

  For more information, see Siebel Installation Guide for the operating system you are using.

• Read About Upgrading Data to a Higher Encryption Level.
• Change the key file password.

  For more information, see Managing the Key File Using the Key Database Manager.

Implementing Siebel Strong Encryption

To implement Siebel Strong Encryption, perform the steps in the following procedure.

To implement Siebel Strong Encryption

1. Verify that you have completed the tasks listed in Requirements for Implementing Siebel Strong Encryption.
2. Navigate to one of the following directories to locate the SSE files:
   • To implement Siebel Strong Encryption on the Siebel Web Server Extension (SWSE), navigate to the following directory:
     • Windows:SWEAPP_ROOT \BIN\SSEP
     • UNIX:SWEAPP_ROOT/BIN/SSEP

       where SWEAPP_ROOT is the Siebel Web Server Extension installation directory.

   • To implement Siebel Strong Encryption on the Siebel Server or Gateway Name Server, navigate to the following directory:
     • Windows:SIEBEL_ROOT\Component\BIN\SSEP
     • UNIX: SIEBEL_ROOT/Component/LIB/SSEP

       where:

     • SIEBEL_ROOT is the installation directory for your Siebel Enterprise.
     • Component is either siebsrvr or gtwysrvr.

       The SSEP directory contains the files shown in the following table.

       File	Purpose
       sslcrsa128.dll (Windows) libsslcrsa128.so (UNIX)	Provides AES 128-bit data encryption.
       sslcrsa256.dll (Windows) libsslcrsa256.so (UNIX)	Provides AES 192-bit or 256-bit data encryption.
       sslcnapi128.dll (Windows) sslcnapi128.so (UNIX)	Used to increase the certificate key sizes supported for SISNAPI communications.

3. To increase the certificate key sizes supported for SISNAPI communications, see Increasing the Certificate Key Sizes Supported For SISNAPI Communications.
4. To increase the key length used for data encryption, copy the files as indicated:
   • Windows. Depending on the key length you want to use, copy either sslcrsa128.dll or sslcrsa256.dl to the SIEBEL_ROOT\siebsrvr\BIN, SIEBEL_ROOT\gtwysrvr\BIN, or SWEAPP_ROOT\BIN directory.
   • UNIX. Depending on the key length you want to use, copy either libsslcrsa128.so or libsslcrsa256.so to the directory SIEBEL_ROOT/siebsrvr/LIB, or to SIEBEL_ROOT/gtwysrvr/LIB, or to SWEAPP_ROOT/BIN.
5. Upgrade the key database file to use the level of data encryption you chose in Step 4 by running the keydbupgrade.exe utility.

   For information on this task, see Increasing the Encryption Level.