Configuring encryption in Enterprise Server 9

Encryption is needed when you want the Enterprise Server to be secured by using secure http (https).

Enterprise comes with 2 options with which paths for the following encryption keys can be set:

1. Private key
2. Public key

IMPORTANT: These encryption options have a significant performance hit on password encryptions done server-side. These options are disabled by default.

Setting the private key

The path to the private RSA encryption key and the base64 encoded private key is set by using the following option:

• File: configserver.php file
• Name of option: ENCRYPTION_PRIVATEKEY_PATH
  
• Possible values: any path (use forward slashes)
• Default setting: BASEDIR.'/config/encryptkeys/privkey_1024.pem
• Example:

('ENCRYPTION_PRIVATEKEY_PATH', BASEDIR.'/config/encryptkeys/privkey_1024.pem' )

Setting the public key

The path to the private RSA encryption key and the base64 encoded public key is set by using the following option:

• File: configserver.php file
• Name of option: ENCRYPTION_PUBLICKEY_PATH
  
• Possible values: any path (use forward slashes)
• Default setting: BASEDIR.'/config/encryptkeys/pubkey_1024.pem
• Example:

('ENCRYPTION_PUBLICKEY_PATH', BASEDIR.'/config/encryptkeys/pubkey_1024.pem' )