MicroStrategy ONE

Managing Encryption Key Configuration Options

The import and export features of EKM allow you to securely share and transmit encryption keys using a secure bundle.

Importing and Exporting Encryption Keys to a Secure Bundle

Clustered Intelligence Servers or servers sharing the same metadata must use the same set for encryption keys. This is accomplished by exporting the secure bundle from the first configured Intelligence Server and then importing the secure bundle to the other servers.

For recovery purposes you should export and store a secure bundle outside of your MicroStrategy environment, even if you are only using a single Intelligence Server instance. You will not be able to recover the information stored in your metadata without the secure bundle and secure bundle code.

Exporting to a Secure Bundle

  1. Open Configuration Wizard.
  2. Select Manage Encryption Keys.
  3. Click Next.
  4. Select Export encryption keys to a Secure Bundle.
  5. Click Next.
  6. Enter your Administrator user name and password.
  7. Click Next.

  8. Accept the auto-generated Secure Bundle Code or click the refresh button to regenerate the code.

    Record the generated code value. It will be needed for the importing process.

  9. Click Next.
  10. Click Finish to export the Secure Bundle.
  11. Review the message on the warning dialog box and click OK.

Importing a Secure Bundle

You can use this option to configure additional nodes in a clustered environment. Ensure that you have updated the metadata associated with the Intelligence Server before importing the Secure Bundle.

  1. Copy the exported Secure Bundle to the target Intelligence Server.
  2. Open Configuration Wizard.

  3. Select Manage Encryption Keys.

  4. Click Next.
  5. Select Import encryption keys from a Secure Bundle
  6. Click Next.
  7. Enter your Administrator user name and password.
  8. Click Next.
  9. Click the browse button and navigate to the Secure Bundle location.
  10. Click Open to select the file.
  11. Enter the Secure Bundle Code from the export process.
  12. Click Next.
  13. Click Finish to import the Secure Bundle.
  14. Review the message on the warning dialog box and click OK

Generating a New Master Key

  1. Copy the exported Secure Bundle to the target Intelligence Server.
  2. Open Configuration Wizard.

  3. Select Manage Encryption Keys.

  4. Click Next.
  5. Select Generate New Master Key.
  6. Click Next.
  7. Enter your Administrator user name and password.
  8. Click Next.
  9. The location of the current Master Key and the destination for the new Master Key are displayed.
  10. Click Next.
  11. Click Finish to generate the new Master Key.

Changing the Master Key Location

To modify the location where the Intelligence Server looks for the Master Key file:

  1. Copy the exported Secure Bundle to the target Intelligence Server.
  2. Open Configuration Wizard.

  3. Select Manage Encryption Keys.

  4. Click Next.
  5. Select Change Master Key Location.
  6. Click Next.
  7. Enter your Administrator user name and password.
  8. Click Next.
  9. Click the browse button and navigate to the new location for the Master Key.
  10. Specify a name for the Master Key file and click Save.
  11. Click Finish to change the Masker Key location.
  12. Review the message on the warning dialog box and click OK.