Profile Key Manager

The Profile Key Manager (PKM) provides a means of updating the encryption key for properties in the Profiles store of Commerce Server Core Systems. The site or database administrator uses the Profile Key Manager to do one of the following:

• Encrypt profile properties in the properties store if these properties were not previously encrypted. The only properties that can be encrypted are those with the type string or password. An example would be to encrypt credit card information.

• Re-encrypt profile properties. It is a good practice to periodically re-encrypt stored properties because a static key becomes easier to break over time. Re-encryption prevents the key from being overexposed.

Run the Profile Key Manager after you create your user profiles for the first time, and as often as recommended by your business plan.

Note

The Profile Key Manager expects the keyIndex property stored with each profile entry to be called "KeyIndex." Giving this property another name will make the tool unable to perform encryption operations.

In This Section

• Preparing to Use the Profile Key Manager

• Generating a New Encryption Key

• Denying Updates

• Updating the Application Runtime

• Updating the Stored Data

• Using the Profile Key Manager

• Profile Key Manager Command Line Utility Reference

• Decrypting Profile Data