Defining a New Encryption Profile and New Algorithm Chain

Before defining a new encryption profile with a new algorithm chain, you should decide which algorithm you want to use.

To define a new encryption profile and new algorithm chain:

  1. Select PeopleTools, and then Security, and then Encryption, and then Encryption Profiles.

  2. On the search page, enter a new Encryption Profile ID and new Algorithm Chain ID.

  3. (Optional) Enter descriptions for the profile and chain.

  4. Specify the chain options.

  5. Enter desired algorithms.

  6. Generate the chain.

  7. Supply Optional Profile Parameters if desired.

  8. When you click Save, the Testing and Paired Profile group boxes appear.

    The page now functions the same as it does when you edit or update mode an existing encryption profile.

This example illustrates the fields and controls on the Administer Encryption Profile page when creating a new profile and new algorithm chain.

Administer Encryption Profiles page - New Profile
Field or Control Description

Unicode Conversions

Select Include to create a chain with PSUnicodeToAscii as the first algorithm in the chain sequence and PSAsciiToUnicde as the last algorithm in the chain sequence.

See Defining Algorithm Chains.

Encoding

  • None — The generated chain will not have any encoding algorithms inserted.

  • Base64 —The generated chain will automatically ensure base64_encode or base64_decode algorithm is added at the correct step in the chain.

  • HEX — The Generated Chain will automatically ensure PSHexEncode or PSHexDecode algorithm is added at the correct step in the chain.

Note: In some cases the Encoding settings will be automatically overridden based on the first algorithm specified in the chained algorithms grid. For example, smime and pkcs7 will be forced to have None as the Encoding option.

Chained Algorithms

Select an Algorithm ID from the available list. Click the plus button (+) to add additional algorithms.

Generate Chain

The Generate Chain option appears after you select an Algorithm ID. When you click this option the chain sequence for the selected Algorithm ID is displayed.

Each algorithm in the chain appears in order, in its own row with its algorithm ID and chain sequence number.

If there are associated parameters for an algorithm, you see an expandable Optional Profile Parameters section.

Optional Profile Parameters

Enter any required parameters for the algorithm. You will only be allowed to enter parameters that are valid for the loaded algorithm.

See Encryption Algorithm Libraries.

Reset Chain

The Reset Chain button appears after you generate the chain. Click this button to remove the list of algorithms and select a different Algorithm ID.