Siebel Security Guide > Communications and Data Encryption >

Implementing the Siebel Strong Encryption Pack

The Siebel Strong Encryption Pack is installed during the Siebel Enterprise and Siebel Web Server installations. No separate installation of Siebel Strong Encryption Pack is required. However, there are various tasks you must perform to use the Siebel Strong Encryption Pack. This topic describes these tasks. For an overview of the Siebel Strong Encryption Pack, see About the Siebel Strong Encryption Pack.

NOTE:  Siebel Strong Encryption Pack is only available in U.S. English (enu); however, it can be implemented in a Siebel environment that uses other languages.

Requirements for Implementing the Siebel Strong Encryption Pack

Before implementing the Siebel Strong Encryption Pack, carry out the following tasks:

• Install and configure a Siebel Enterprise.

  For more information, see Siebel Installation Guide for the operating system you are using.

• Read About Upgrading Data to a Higher Encryption Level.
• Change the key file password.

  For more information, see Managing the Key File Using the Key Database Manager.

Implementing the Siebel Strong Encryption Pack

To implement the Siebel Strong Encryption Pack, perform the steps in the following procedure.

To implement the Siebel Strong Encryption Pack

1. Verify that you have completed the tasks listed in Requirements for Implementing the Siebel Strong Encryption Pack.
2. Navigate to one of the following directories to locate the SSEP files:
   • To implement the Siebel Strong Encryption Pack on the Siebel Web Server Extension (SWSE), navigate to the following directory:
     • Windows:SWEAPP_ROOT \BIN\SSEP
     • UNIX:SWEAPP_ROOT/BIN/SSEP

       where SWEAPP_ROOT is the Siebel Web Server Extension installation directory.

   • To implement the Siebel Strong Encryption Pack on the Siebel Server or Gateway Name Server, navigate to the following directory:
     • Windows:SIEBEL_ROOT\Component\BIN\SSEP
     • UNIX: SIEBEL_ROOT/Component/LIB/SSEP

       where:

     • SIEBEL_ROOT is the installation directory for your Siebel Enterprise.
     • Component is either siebsrvr or gtwysrvr.

       The SSEP directory contains the files shown in the following table.

       File	Purpose
       sslcrsa128.dll (Windows) libsslcrsa128.so (UNIX)	Provides AES or RC2 128-bit data encryption.
       sslcrsa256.dll (Windows) libsslcrsa256.so (UNIX)	Provides AES 192-bit or 256-bit data encryption.
       sslcnapi128.dll (Windows) sslcnapi128.so (UNIX)	Used to increase the certificate key sizes supported for SISNAPI communications.

3. To increase the certificate key sizes supported for SISNAPI communications, see Increasing the Certificate Key Sizes Supported For SISNAPI Communications.
4. To increase the key length used for data encryption from the default value of RC2 52-bit encryption, copy the files as indicated:
   • Windows. Depending on the key length you want to use, copy either sslcrsa128.dll or sslcrsa256.dl to the SIEBEL_ROOT\siebsrvr\BIN, SIEBEL_ROOT\gtwysrvr\BIN, or SWEAPP_ROOT\BIN directory.
   • UNIX. Depending on the key length you want to use, copy either libsslcrsa128.so or libsslcrsa256.so to the directory SIEBEL_ROOT/siebsrvr/LIB, or to SIEBEL_ROOT/gtwysrvr/LIB, or to SWEAPP_ROOT/BIN.
5. Upgrade the key database file to use the level of data encryption you chose in Step 4 by running the keydbupgrade.exe utility.

   For information on this task, see Increasing the Encryption Level.