If password encryption is not enabled

If password encryption has never been enabled in the configuration properties file, bfpwcrypt.conf, use the steps in this topic after you change from SHA1 to SHA2.

  1. Rename the password encryption configuration properties file.
    For example, change the name of the bfpwcrypt.conf file to bfpwcrypt.conf.sha1
  2. Go to Administration > Security, and change the Digest Algorithm to SHA2.
  3. Restart the Build Forge® management console.
    A new bfpwcrypt.conf file is created.
  4. Optional: Go to Administration > Security, and enable password encryption.
  5. Optional: Go to Administration > Security > Keystore and update the ServerAuth, LDAP, and User passwords.
  6. If the agent also enables password encryption, copy the newly generated bfpwcrypt.conf file to the server where the agent is located.
  7. If the ssl_key_password was encrypted, re-encrypt the password.
    For example, re-encrypt bfagent -e xxxxxx. In this example, xxxxxx represents the password.
  8. In the bfagent.conf file, enable digest_algorithm SHA2 by removing the # before the line or by adding a new line.
  9. Restart the bfagent.