System Encryption

SelectSystem Configuration>General.

FME Server encrypts all data in theFME Server Database, as well as passwords and tokens of FME Server configurationbackups. By default, this encryption is managed using an encryption key that is common to any FME Server installation. You may wish to enhance encryption security by generating your own custom encryption keys, which you can apply on a rotating basis.

When using custom encryption keys, keep in mind the following:

• 不要忘记任何铜stom keys you generate. Data that is encrypted under a lost key cannot be accessed.
• When performing aBackup & Restoreof an FME Server configuration, you must restore to an FME Server that uses the same custom encryption key as the backup.

Getting Started with Custom Encryption

Before generating and using custom encryption keys, you must enable custom encryption on the FME Server. On the General tab of the System Configuration page, expand System Encryption, and selectEncryption Mode:限制.

Note:You must be a member of the fmesuperuserroleto enable custom encryption.

To generate and use a new custom encryption key

1. Generate a custom encryption key: ClickGenerate Key. On the Generating Key dialog, clickGenerateto invalidate the previous key, and use the newly-generated one.
2. Download the newly-generated key, in case you want to reuse it later: ClickDownload Key.

To reuse a previously-generated custom encryption key

1. ClickUpload Key.
2. Under Choose .jceks File, clickUpload Fileto select the key you want to use. Alternatively, drag-and-drop the key over the "Drop file to upload" area.

To stop using custom encryption

SelectEncryption Mode:Secure (Default).