You are here: Pega Platform database > Security > Storage stream encryption of selected classes > Encrypting the Storage Stream

Encrypting the Storage Stream

The Pega Platform does not include encryption software, however, it does include the sample Java class PRCipherSampleBF, which exposes the SunJCE Java Cryptography Extension provider (in your system's JDK) of the Blowfish algorithm. The sample class is for demonstration purposes only and to help with development. To ensure the security and uniqueness of your encryption implementation, do not implement this sample.

Implementation of a site-specific encryption algorithm requires Java skills and familiarity with Java Cryptography Extension (JCE) technology. This topic provides an overview of the process for planning purposes only. Obtain the necessary scripts and detailed instructions from Pegasystems Global Customer Support.

To encrypt the Storage Stream:

ClosedBuild a site-specific encryption cyper
  1. Obtain the runPega and compileAndLoad script from Global Customer support.
  2. Determine the choices available for your site-specific cipher by running the JCE Capabilities tool (part of the runPega script) from the command prompt.
  3. The results depend on your application server and JVM version. Based on the results, choose a combination of cipher, key length, and provider.
  4. Run PRCipherGenerator to create a class skeleton.
  5. Complete the skeleton class using the Blowfish samples provided by Pegasystems. Your final implementation should use the same signature as this sample and custom coding not disclosed to Pegasystems.
  6. Add the new class to the appropriate .jar file. Use the compileAndLoad script to upload the compiled class to the Pega 7 database. You cannot use the Import gadget for this.
  7. Update the prconfig.xml file on each node so that the sitecipher class entry matches your new class:

    <env name="crypto/sitecipherclass" value="YYYY.ZZZZ.QQQQ" />

    where YYYY.ZZZZ is the name of your package and QQQQ is the name of your class, using the same values as in step 5.

  8. To make the prconfig.xml setting take effect, stop and restart the system.
ClosedUpdate class forms
  1. Open each class form that is to hold instances that have encrypted Storage Stream values and click Encrypt BLOB? on the Basic tab.
  2. Save the class form.
  3. Repeat steps 1 and 2 for all affected classes.

Encryption is enabled. Your application can create instances of the class normally.

Related information

Open topic with navigation