IBM FileNet P8, Version 5.2.1

Encrypting content

Encrypt the new content for a storage area to help protect the confidentiality of the content in case the content is accessed outside of FileNet® P8. You can also force the generation of a new encryption key at any time. You might want a new key as a precautionary measure or when you suspect that the security of the current key has been compromised.

About this task

Restriction:

Existing content is not encrypted or reencrypted.
When replicated, content is not encrypted.
When passed for indexing, content is not encrypted.

Important: The retrieval of encrypted content relies upon information that is stored in the object store data. If that information is lost, the content is effectively lost also. To avoid such problems, regularly back up the object store data.

Procedure

To enable content encryption for a storage area

Access the storage area in the administration console:
1. In the domain navigation pane, click the object store.
2. In the object store navigation pane, click Administrative > Storage.
3. Depending on the storage area type, click either Advanced Storage > Advanced Storage Areas, or click Storage Areas.
4. Open the storage area.
On the Configuration tab, click Encryption method and select the encryption key that is created to encrypt the storage area. (Content Platform Engine 5.2.1.3-P8CPE-FP003 or later is required.)
Tip: To force the generation of a new encryption key for a storage area when encryption is already enabled, clear the check box and then select it again.