PingIntelligence

Changing abs_master.key

Create your own ABS master key to obfuscate keys and password in ABS.

Before you begin

ABS must be stopped before creating a new abs_master.key.

About this task

To create your own ABS master key:

Steps

  1. Run the following command: generate_obfkey.

  2. If ABS is running, then stop ABS before generating a new ABS master key. Enter the following command to stop ABS:

    # /opt/pingidentity/abs/bin/stop.sh
checking API Behavioral Security status
sending shutdown signal to ABS, please wait...
API Behavioral Security stopped

  3. To change abs_master.key, enter the generate_obfkey command to change the default ABS master key:

    /opt/pingidentity/abs/bin/cli.sh generate_obfkey -u admin -p admin
Please take a backup of config/abs_master.key before proceeding.
Warning: Once you create a new obfuscation master key, you should obfuscate all config keys also using cli.sh -obfuscate_keys
Warning: Obfuscation master key file
/pingidentity/abs/config/abs_master.key already exists. This command will delete it and create a new key in the same file
Do you want to proceed [y/n]: y
Creating new obfuscation master key
Success: created new obfuscation master key at /pingidentity/abs/config/abs_master.key