Question

11
Replies
124
Views
RohithReddyJ Member since 2011 10 posts
Wells Fargo
Posted: 3 years ago
Last activity: 3 years ago
Closed
Solved

Didnt see Pega provided sample Cipher choices in our JVM environment

we have run below command in our environment & it's giving the available choices with JVM, but I didn't see the pega provided default choices with my environment except keylength.

runPega.bat --driver D:\Shared\CipherMechanisam\WEB-INF\lib\ojdbc6.jar --prweb
D:\Shared\CipherMechanisam\ --propfile D:\Shared\CipherMechanisam\WEB-
INF\classes\prbootstrap.properties com.pega.pegarules.exec.internal.util.crypto.JCECapabilities none

  1. transform [DESede]:SKIPJACK/ECB/PKCS7Padding
  2. key length [112]: 128
  3. provider [null]:BC

Even the 1 & 3 arguments not existed in our environment, if I pass them, it works. could you please assist us brief how it works.

Actually we are in the preparation of create new cipher implementation for our environments, in that case what should be the values for these arguments ?

please help.

Thanks,

Rohith

***Moderator Edit: Vidyaranjan | Updated Categories***

Security System Administration
Close popover
Moderation Team has archived post
Posted: 3 years ago

Hi Rohit,


You may use AES and 256 as the 1st and 2nd arguments and you may ignore the last argument.


AES 256 is the strongest available site specific cipher supported by Pega. Please let me know if you need anymore information.

Posted: 3 years ago

Thanks for your quick response.


So if I can follow the below steps, in 1st step, I will get available options with the JVM and at 2, will provide the 1st and 2nd argument then it will generate a java script. the generated java script is still sample which pega providing ?, can we use this in PROD 


Step 1:

runPega.bat --driver D:\Shared\CipherMechanisam\WEB-INF\lib\ojdbc6.jar --prweb

D:\Shared\CipherMechanisam\ --propfile D:\Shared\CipherMechanisam\WEB-

INF\classes\prbootstrap.properties com.pega.pegarules.exec.internal.util.crypto.JCECapabilities none


Step 2:

runPega.bat --driver D:\Shared\CipherMechanisam\WEB-INF\lib\ojdbc6.jar --prweb

D:\Shared\CipherMechanisam\ --propfile D:\Shared\CipherMechanisam\WEB-

INF\classes\prbootstrap.properties com.pega.pegarules.exec.internal.util.crypto.PRCipherGenerator


 

Accepted Solution
Posted: 3 years ago

Hi Rohit,


If you follow the above steps, you will generate a ".java" file, after which you would be


1. Generating a class file and package that into a JAR file and Load it to the database.


2. Once the class which is part of the JAR file is loaded to the database, you will configure that class to be your "Custom" cipher, by using prconfig / DSS settings.


All the above steps are to generate a custom cipher, which can be used to encrypt "TextEncrypted" properties.

Posted: 3 years ago

And also, reg: 256 bit,  I can see in my environment available options " AES/256bit key failed     - unrestricted policy files have not been installed"


Can you also let me know how we can place this mechanism as this is missed

Posted: 3 years ago

Thanks a lot for your help :)

Posted: 3 years ago

Please find the screenshots as below for available options,


 

Posted: 3 years ago

Thanks Habeeb. screen shots was very helpful for us. If we want to place our own cipher in the environment, what is the process which I need to follow.


please suggest.

Posted: 3 years ago

Hi,


It's based on user requirement to choose these options, these are the custom values to generate your own cipher.

Posted: 3 years ago

Thanks Sudhakar for quick response. we have a new project coming up & in this project cases will be having confidential information, so they want more efficient cipher mechanism in place. what will be the pega suggestion to generate own cipher, we need inputs in generating cipher for on our own. Even if we want to apply our own cypher still command execution is same.


Sorry, if I am not getting you here, am very new to this area.


 
Share this page LinkedIn
Copied!