Recovering Site Key Values

If a site key value is accidentally deleted from the JDE.INI file, you can recover it by running the sitekey program and entering the same password that you used to create the site key the first time. The hash of the same password will result in the same hash value, which defines the site key value. The site key text string displayed in the [SITE_KEYS] section will look different than the text string of the original site key value because the process uses random values to convert the site key value to a text string.

If you cannot remember the original password for generating the site key, you can recover the site key by opening a service request (SR) through My Oracle Support:

https://support.oracle.com/

In the service request, include the header portion of an encrypted data item. The header portion is the first 14 characters if it is a text encryption, and it is the first 20 hexadecimal digits if it is a binary encryption. Oracle provides you with a new text string version of the site key that you can manually place in the [SITE KEY] section of the JDE.INI file on the Security Server. The new text string contains the site key required to decrypt the given encrypted data item. It will also decrypt all data items that were originally encrypted with the same site key.

As an alternative to entering a service request, if you are using the encryption only for sensitive data in INI files, you can simply enter a new password in the sitekey program to create a new site key. Then in the Server Manager Console, re-enter all password values, and then re-start all EnterpriseOne systems.

Caution: This alternate method cannot be used if you have encrypted data stored in the database (such as encrypted data for applications).