Configuring a custom cipher
Although Pega Platform has an integrated platform cipher, you can implement a custom cipher to address policies that are specific to your company. You can use your own custom cipher in Pega Platform as a data encryption type.
To configure ciphers, you must have the
pxCanManageDataEncryption privilege, which is included in the
PegaRULES:SecurityAdministrator role.
- Create a custom encryption cipher and define rules in Pega Platform that support this cipher. For more information, see the Pega Community article Creating a custom cipher in Pega Platform.
- Click .
-
In the Application data encryption section, do the following
steps:
- Select Custom cipher to encrypt data with your custom cipher.
- In the Site specific cipher class field, enter the name of the class that you created in step 1.
- Click Activate to start using this custom cipher for encryption purposes.
-
In the System data encryption section, select the source
of the master key.
- Pega Platform
- Keystore
- If you selected Pega Platform, in the Encryption cipher field, press the Down Arrow key, select the encryption cipher, and click Regenerate.
- If you selected Keystore, in the Select keystore field, press the Down Arrow key, select the keystore, and click Activate.
- On the Warning dialog box that informs you about the changed encryption cipher, click Apply to confirm the custom cipher activation.