Rally CMK Encrypt Attachments

Products

• Rally SaaS

Issue/Introduction

We have recently moved to a new CMK provider and created a new KMS Config.  We have made this new KMS Config Primary and any new attachments which are added are now being encrypted using the new configuration.  Our Old Encryption Key will soon no longer be available.  Please can you advise if we should Encrypt data with or without the flag checked.

 

Resolution

Because you are changing KMS, if you check the box, it would encrypt the attachments twice.  Do Not Check the box, proceed with clicking the Encrypt button.  Once the Encrypt button is clicked, the data will decrypted using old key and encrypted using new key, in the background.  You'll get an email when it has completed the encryption.

Additional Information

Keywords: Authorize Encryption, KMS, IronCore Labs