Changing your Encryption Key

Changing your encryption key can be a lengthy process. You must generate a new keystore, distribute it to all modules, and re-save stored passwords.

To change your encryption key:

  1. Remove the p6keystore.jks file from the /database folder.
  2. Do the following, depending on your operating system:
    • For Windows, run: installp6keystore.bat -createnew
    • For Linux, run: installp6keystore.sh -createnew
  3. Copy the p6keystore.jks file to the module folders, and generate a new password file.
  4. Run dbconfigpv.sh or .cmd.
  5. Open the Primavera P6 Administrator.
  6. Re-save the following fields to encrypt them using the new key:

    Database/Instance[n]/Password

    Database/Instance[n]/Content Repository/SharePoint/Password

    Database/Instance[n]/Content Repository/CMIS/Password

    Database/Instance[n]/Content Repository/OracleDatabase/Password

    Database/Instance[n]/BI Publisher/Password

    Database/Instance[n]/BPM Settings/PCS (SaaS only)/Password

    Services/Mail Service/Authorized User Password

    Integration API/RMI/Keystore Password

    Web Services/Security/Authentication/Signed SAML Tokens/Keystore Password

    Web Services/Security/Authentication/Signed SAML Tokens/Private Key Password

    Web Services/Security/Message Protection/Keystore Password

    Web Services/Security/Message Protection/Private Key Password

    Authentication/LDAP/SSL Store Password

    Database Instance/LDAP Connection Settings[n]/Password

    Note: You do not need to re-save fields without stored passwords.


Last Published Tuesday, November 28, 2023