Implementing Siebel Strong Encryption

Siebel Strong Encryption is installed during the Siebel Enterprise and Siebel Web Server installations. However, there are various tasks you must perform to use Siebel Strong Encryption. For more information, see the following:

• "About Siebel Strong Encryption"

• "Requirements for Implementing Siebel Strong Encryption"

• "Implementing Siebel Strong Encryption"

Note: Siebel Strong Encryption is only available in U.S. English (enu); however, it can be implemented in a Siebel environment that uses other languages.

About Siebel Strong Encryption

If you require encryption, then you must use Siebel Strong Encryption, which provides secure encryption for your Siebel Enterprise. Siebel Strong Encryption provides the following:

• AES encryption (128, 192, and 256 bits), using AES Encryptor

• Key Database Upgrade utility

  This utility decrypts the key file (if previously encrypted with a 56-bit or 128-bit RC2 encryption key) and then re-encrypts the key file with a longer key and a more secure algorithm.

AES encryption for data is provided as a Siebel business service and is configured using Siebel Tools. For more information, see "Configuring Encryption and Search on Encrypted Data".

Requirements for Implementing Siebel Strong Encryption

Before implementing Siebel Strong Encryption, carry out the following tasks:

• Install and configure a Siebel Enterprise.

  For more information, see Siebel Installation Guide for the operating system you are using.

• Read "About Upgrading Data to a Higher Encryption Level"

• Change the key file password.

  For more information, see "Managing the Key File Using the Key Database Manager".

Implementing Siebel Strong Encryption

To implement Siebel Strong Encryption, perform the steps in the following procedure.

To implement Siebel Strong Encryption 

1. Verify that you have completed the tasks listed in "Requirements for Implementing Siebel Strong Encryption".

2. Navigate to one of the following directories to locate the SSE files:

   • To implement Siebel Strong Encryption on the Siebel Web Server Extension (SWSE), navigate to the following directory:

     • Windows:SWEAPP_ROOT \BIN\SSEP

     • UNIX:SWEAPP_ROOT/BIN/SSEP

     where SWEAPP_ROOT is the Siebel Web Server Extension installation directory.

   • To implement Siebel Strong Encryption on the Siebel Server or Gateway Name Server, navigate to the following directory:

     • Windows:SIEBEL_ROOT\Component\BIN\SSEP

     • UNIX: SIEBEL_ROOT/Component/LIB/SSEP

     where:

     • SIEBEL_ROOT is the installation directory for your Siebel Enterprise.

     • Component is either siebsrvr or gtwysrvr.

   The SSEP directory contains the files shown in the following table.

   File	Purpose
   sslcrsa128.dll (Windows) libsslcrsa128.so (UNIX)	Provides AES 28-bit data encryption.
   sslcrsa256.dll (Windows) libsslcrsa256.so (UNIX)	Provides AES 192-bit or 256-bit data encryption.
   sslcnapi128.dll (Windows) sslcnapi128.so (UNIX)	Used to increase the certificate key sizes supported for SISNAPI communications.

   
   

3. To increase the certificate key sizes supported for SISNAPI communications, see "Increasing the Certificate Key Sizes Supported For SISNAPI Communications".

4. To increase the key length used for data encryption, copy the files as indicated:

   • Windows. Depending on the key length you want to use, copy either sslcrsa128.dll or sslcrsa256.dl to the SIEBEL_ROOT\siebsrvr\BIN, SIEBEL_ROOT\gtwysrvr\BIN, or SWEAPP_ROOT\BIN directory.

   • UNIX. Depending on the key length you want to use, copy either libsslcrsa128.so or libsslcrsa256.so to the directory SIEBEL_ROOT/siebsrvr/LIB, or to SIEBEL_ROOT/gtwysrvr/LIB, or to SWEAPP_ROOT/BIN.

5. Upgrade the key database file to use the level of data encryption you chose in 4 by running the keydbupgrade.exe utility.

   For information on this task, see "Increasing the Encryption Level".