Creating a keystore instance for an external key management service
You can encrypt application and system data in Pega Platform™ by using either the platform cipher or a cipher that is stored within an external key management service (KMS). Use an external KMS to control the ownership, creation, and rotation of your master key.
To configure Pega Platform to use an
external KMS, complete the following tasks.
- In the external key management service, create the master key.
- In Pega Platform, create an instance of the keystore rule to
access the external KMS. For step-by-step examples for various key management services for tasks 1 and 2, see:
- In Pega Platform, configure and activate the platform cipher
to reference the keystore instance.For more information, see Configuring the platform cipher.
- In Pega Platform, identify the classes and properties to
encrypt.
For more information, see:
Previous topic Changing the default keystore caching settings Next topic Importing an X.509 certificate