ABS must be stopped before creating a new abs_master.key.

To create your own ABS master key:

  1. Run the following command: generate_obfkey.
  2. If ABS is running, then stop ABS before generating a new ABS master key. Enter the following command to stop ABS:
    # /opt/pingidentity/abs/bin/stop.sh
    checking API Behavioral Security status
    sending shutdown signal to ABS, please wait...
    API Behavioral Security stopped
  3. To change abs_master.key, enter the generate_obfkey command to change the default ABS master key:
    /opt/pingidentity/abs/bin/cli.sh generate_obfkey -u admin -p admin
    Please take a backup of config/abs_master.key before proceeding.
    Warning: Once you create a new obfuscation master key, you should obfuscate all config keys also using cli.sh -obfuscate_keys
    Warning: Obfuscation master key file
    /pingidentity/abs/config/abs_master.key already exists. This command will delete it and create a new key in the same file
    Do you want to proceed [y/n]: y
    Creating new obfuscation master key
    Success: created new obfuscation master key at /pingidentity/abs/config/abs_master.key