Encrypting Keystore Passwords for WS-Security

This section discusses how to encrypt the password for the keystore that contains digital certificates for WS-Security.

Understanding Encrypting Keystore Passwords for WS-Security

When working with the WS-Security digital certificates, PeopleSoft recommends that you encrypt the keystore password in the wss.properties file using the PSCipher utility.

Encrypting the WS-Security Keystore Password

To encrypt the WS-Security keystore password, making sure to write down the encrypted output.

1. Encrypt the WS-Security keystore password using the PSCipher utility.

   See Encrypting Passwords Using the PSCipher Java Utility.

2. Access the wss.properties file.

   The location is <PIA_HOME>\webserv\<DOMAIN>\peoplesoft\applications\PSIGW.war\WEB-INF\classes.

3. Set the following property equal to the encrypted password you created using the PSCipher utility:

   org.apache.ws.security.crypto.merlin.keystore.password

   The following example shows an encrypted password entered for this property:

   org.apache.ws.security.crypto.merlin.keystore.password== *** Encrypted password ***

4. Save the changes.