Differences

This shows you the differences between two versions of the page.

--- tutorial:adm:czechidm_installation_win [2020/06/10 17:01]
apeterova fake certificate
+++ tutorial:adm:czechidm_installation_win [2020/09/08 12:11]
kopro [Create CzechIdM configuration] update confidential storage key length
@@ Line 243: / Line 243: @@
 There are two properties in application-production.properties that influence the confidential storage:
-  * You can set the 128bit (16byte) key directly in the property file using **cipher.crypt.secret.key** property or
+  * You can set the 128bit (16byte) or 256bit (32byte) key directly in the property file using **cipher.crypt.secret.key** property or
   * you can create separate file (in our case **secret.key**) containing a random string. Then you reference this file with **cipher.crypt.secret.keyPath** property.
 <note warning>On Windows, you have to use separate file **secret.key**.</note>
@@ Line 249: / Line 249: @@
 <note warning>CzechIdM doesn't contain any default key for crypt confidential storage. Please define it before you start using the IdM.</note>
-Confidential storage uses AES/CBC/PKCS5Padding ([[https://docs.oracle.com/javase/7/docs/api/javax/crypto/Cipher.html|more info]]) algorithm which operates with 128bit key.
+Confidential storage uses AES/CBC/PKCS5Padding (more info) algorithm which operates with 128bit or 256bit key.
 === Attachment store ===