Protecting Data Using Arcserve Backup › How Arcserve Backup Secures Data › Arcserve Backup and FIPS Compliance › Change the Current Encryption Algorithm

Change the Current Encryption Algorithm

The current encryption algorithm (AES256) used for Arcserve Backup can be changed by modifying the CryptoConfig.cfg file. This file includes a list of all supported encryption algorithms for Arcserve Backup products installed on your machine. You can change the current encryption algorithm to any of the alternate candidate algorithm values that are listed. This change will affect all the Arcserve Backup products (base, agents, and options) that are installed on that machine.

To change the current encryption algorithm

1. Run the cstop.bat script to stop all services before making the change.

   ProgramFiles\CA\ARCserve Backup\cstop.bat
   

2. Change the current encryption algorithm value to one of the candidate values.

   ProgramFiles\CA\SharedComponents\ARCserve Backup\CryptoConfig.cfg 
   

3. Run Configencr.exe to transfer the encrypted repositories to use the new encryption algorithm.

   ProgramFiles\CA\ARCserve Backup\Configencr.exe
   

4. Run the cstart.bat script to start all services after making the change.

   ProgramFiles\CA\ARCserve Backup\cstart.bat