If you encrypt a One Identity Manager database, you must declare the database key to the One Identity Manager Service.

CAUTION: If the One Identity Manager Service finds a private key in the installation directory on startup, it places the key in the Windows internal key container of its service account and deletes the file from the hard drive. So save the private key at another location in addition to the service install directory.

To declare the database key

1. Declare the following information in the One Identity Manager Service configuration file. Use the Job Server Editor in the Designer or the Job Service Configuration program to edit the configuration file. For more information, see the One Identity Manager Configuration Guide.

   Table 17: Configuring the One Identity Manager Service for encryption

   Configuration module	Parameters	Meaning
   JobServiceDestination	Encryption method (EncryptionScheme)	Encryption method used
   JobServiceDestination	File with private key (PrivateKey)	Enter the file with the encryption information. The default file is private.key.
   JobServiceDestination	Private key identifier (PrivateKeyId)	Identifier of the private key. Use this parameter if you work with several private keys, for example, if One Identity Manager Service data must be exchanged between two encrypted One Identity Manager databases. If no ID is specified, a search is performed for the private.key file.
   File with the private key.		Private key identifier and path to private key file. The ID is expected in the JobServiceDestination in the Private key identifier parameter (PrivateKeyId) The default key has the ID Default.

2. Save the key file created in the service’s install directory.

3. Open the service management and restart the One Identity Manager Service.

Detailed information about this topic

• Encrypting database information