Store master key in Weblogic 11g

[Sundar Pari]

Hello,

Is there a way to store a master key securely in Weblogic server 11g ?
If yes please point me to a place where I can get some clue/examples regarding storing and retrieval of master key.

Thanks in Advance.

-Sundar

[anandraj tadkal]

Hi,

Could you please elaborate the 'Master' key?

Do you mean by the WebLogic console username / password credentials?

[Sundar Pari]

Sorry for very late reply.

By Masterkey I meant my encryption key. I use encryption key to encrypt sensitive information .

[anandraj tadkal]

Hey,

You can use the StoreUserConfig feature of WebLogic server.

Creates a user-configuration file and an associated key file. The user-configuration file contains an encrypted username and password. The key file contains a secret key that is used to encrypt and decrypt the username and password.

Only the key file that originally encrypted the username and password can decrypt the values. If you lose the key file, you must create a new user-configuration and key file pair.

Below article provides a step to step details about the utility.

http://weblogic-wonders.com/weblogic/2009/11/30/steps-to-use-userconfig-file-and-userkey-file/

http://download.oracle.com/docs/cd/E13222_01/wls/docs81/admin_ref/clia.html

[Sundar Pari]

Thanks a lot Anand!

This is what I am looking for...