AESKeyFile

The path to the AES key file to use for IDOL data encryption. Setting this parameter turns on encryption for your IDOL Content Component data index.

CAUTION: If you lose your encryption keys after you enable encryption, you cannot recover your IDOL data.

IDOL Content Component uses 256-bit AES encryption. Encryption includes:

IDOL Content Component does not start if the key file that you specify is not valid.

You can determine the encryption status of your index by using the GetStatus action.

You can turn on AES encryption in an index that has existing content. In this case:

To ensure that all your data is encrypted, Micro Focus recommends that you reindex your data into an empty index.

After you enable encryption, IDOL Content Component verifies your encryption key each time you restart the server. The service logs an error and does not start if the key file has changed, or is missing.

Similarly, if you use the DREINITIAL index action with a backup path, IDOL Content Component checks the encryption settings in the backup directory before attempting to restore the index. If the target index has incompatible encryption settings, the DREINITIAL index action fails with a bad parameter index status.

NOTE: You can also enable encryption by using the -dataencryptionkey command line parameter when you start the IDOL Content component. If you use this option, it overrides the AESKeyFile setting.

Type: String
Default:  
Required: No
Configuration Section: DataEncryption
Example: AESKeyFile=C:\IDOL\data\encryption\AES.ky
See Also: TermInfoReadBlockSize