Generating a new MAC key file

You can generate a new MAC key file to improve the reliability of message verification using encryption.

About this task

To generate a new MAC key file:

Procedure

  1. Run the following command from the command line:
    GenMacKey -o filename

    The filename is the path and file name of the new MAC key file.

  2. Update the central server's configuration to include the location of the new MAC key file in one of the following ways:
    • Using encryption tags: Edit the relevant line in the concsm.cfg file to add a path and file name to the mac tag.
    • Using encryption parameters: Edit the encryption parameters file to alter the value of the ENCCSM_MACFILES parameter.
  3. If necessary, remove old MAC key file entries from the configuration.
  4. Distribute the new MAC key file among all appropriate computers.