Copyright © Cloud Software Group, Inc. All Rights Reserved

Changing the Encryption Algorithm

Steps Required for z/OS

When you make changes to the encryption algorithm, you must re-assemble the encryption loadable module and re-link into the load library. All TIBCO Object Service Broker components, except the Data Object Broker, must be stopped and restarted before the new algorithm takes effect.

Steps Required for Open Systems

When changes are made to the encryption algorithm, you must re-compile the encryption loadable module and replace it in the bin directory for Windows and the sharedlib directory for Solaris. All TIBCO Object Service Broker components, except the Data Object Broker, must be stopped and restarted before the new algorithm takes effect.

How Do Multiple Changes of an Algorithm Affect a User?

If the encryption algorithm changes twice between a user logging in (usually because of an extended absence), the user is locked out of TIBCO Object Service Broker. A system administrator or the user’s security administrator must then assign a new password to the user ID. Refer to Chapter 3, Managing User Profiles for information on setting passwords in a user profile.

Automatically Upgrading Passwords

When the encryption algorithm changes, the VersionMismatch or hrnVersionMismatch function automatically upgrades passwords. Refer to Encryption API for z/OS for information about the VersionMismatch function and Encryption API for Open Systems for information about the hrnVersionMismatch function.

If a user is successful at doing a back-level encryption from the S6BBRULH/hrnbrulh (Batch Unload (Online)) utility, the login is successful and an automatic upgrade is not performed. A warning message appears, to indicate that an upgrade is pending. To cause the upgrade to take effect, the user must log in interactively with the appropriate user ID.

See Also

TIBCO Object Service Broker for z/OS Installing and Operating or TIBCO Object Service Broker for z/OS Installing and Operating for information about stopping and starting TIBCO Object Service Broker components.

TIBCO Object Service Broker for z/OS Utilities for your operating environment about the S6BBRULH/hrnbrulh utilities.

Copyright © Cloud Software Group, Inc. All Rights Reserved