CA Top Secret to change Secfile from Triple-DES to AESENC(256), is it mandatory to run a TSSMAINT and TSSXTEND?

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

Question:

In order to change from Triple-DES to AESENC(256), is it mandatory to run a TSSMAINT and TSSXTEND?

Answer:

Yes:

To convert a security file from Triple-DES encryption to AES encryption: 

Run TSSMAINT to initialize a new security file and to specify the AESENCRYPT option. 

Run TSSXTEND to copy the old security file to the new security file.

 

Additional Information:

 Support Online

https://docops.ca.com/topsecret

 

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component: