Changing abs_master.key
Create your own ABS master key to obfuscate keys and password in ABS.
Before you begin
ABS must be stopped before creating a new abs_master.key
.
About this task
To create your own ABS master key:
Steps
-
Run the following command:
generate_obfkey
. -
If ABS is running, then stop ABS before generating a new ABS master key. Enter the following command to stop ABS:
# /opt/pingidentity/abs/bin/stop.sh checking API Behavioral Security status sending shutdown signal to ABS, please wait... API Behavioral Security stopped
-
To change
abs_master.key
, enter thegenerate_obfkey
command to change the default ABS master key:/opt/pingidentity/abs/bin/cli.sh generate_obfkey -u admin -p admin Please take a backup of config/abs_master.key before proceeding. Warning: Once you create a new obfuscation master key, you should obfuscate all config keys also using cli.sh -obfuscate_keys Warning: Obfuscation master key file /pingidentity/abs/config/abs_master.key already exists. This command will delete it and create a new key in the same file Do you want to proceed [y/n]: y Creating new obfuscation master key Success: created new obfuscation master key at /pingidentity/abs/config/abs_master.key