Siebel Security Guide > Communications and Data Encryption >

Increasing the Encryption Level

This topic describes how to upgrade Siebel Business Applications to 128-bit, 192-bit, or 256-bit encryption.

You can upgrade the key database file to use a level of encryption greater than 56-bit RC2 encryption provided you have implemented the Siebel Strong Encryption Pack as described in Implementing the Siebel Strong Encryption Pack. Table 8 shows the supported data encryption upgrade scenarios.

The following procedure describes how you upgrade the key database file to use a higher level of encryption.

To upgrade the key database file to use a higher level of encryption

1. Implement the Siebel Strong Encryption Pack as described in Implementing the Siebel Strong Encryption Pack.
2. Make sure that the Siebel Gateway Name Server and Siebel Servers within the Siebel Enterprise are running.
3. On the Siebel Server where the Siebel Strong Encryption Pack files are located, open a command-line window and navigate to the following directory:

   SIEBEL_ROOT\siebsrvr\bin

4. Execute the appropriate command:

   On Windows:

   keydbupgrade.exe /u db_username /p db_password /l language /c config_file

   On UNIX:

   keydbupgrade /u db_username /p db_password /l language /c config_file

   The following table describes the flags and parameters for the keydbupgrade command.

   Flag	Parameter	Description
   /u	db_username	User name for the database user
   /p	db_password	Password for the database user
   /l	language	Language type
   /c	config_file	Full path to the application configuration file, such as siebel.cfg for Siebel Sales

5. When prompted, enter the key length you are upgrading from. If you have not implemented encryption before, then select 56-bit encryption.
6. Select the key length to upgrade to.
7. Enter the key database manager password.

   The utility upgrades the encryption level to the level you specified in Step 6. For information about the key database manager password, see Managing the Key File Using the Key Database Manager.

8. To verify that the encryption level has been upgraded, note if the timestamp for keyfile.bin matches the time when you executed the keydbupgrade utility.
9. After you verify that the encryption level has been upgraded, perform the following tasks in the order listed:
   1. Add a new encryption key.

      For information, see Adding New Encryption Keys.

   2. Change the Siebel administrator password so that it is reencrypted using the new encryption algorithm provided by the Siebel Strong Encryption Pack. For information on this task, refer to one of the following topics:
      • Changing System Administrator Passwords on Microsoft Windows. After changing the password, delete the Siebel Server system service and re-create it using the new password.
      • Changing the Siebel Administrator Password on UNIX
   3. Reencrypt Gateway Name Server parameters that are encrypted in the siebns.dat file.

      For information, see Reencrypting Password Parameters in the Siebns.dat File.

10. Distribute the key file (keyfile.bin) that contains the increased encryption level to the other Siebel Servers in your Siebel Enterprise. Place it in the same directory on each Siebel Server, that is:

    SIEBEL_ROOT\siebsrvr\admin\

11. Upgrade existing encrypted data to use the new encryption level.

    For information on this task, see About Upgrading Data to a Higher Encryption Level.