Change Encryption Key

This utility allows users belonging to the Supervisor user group with access to Utilities to select Utilities > Change Encryption Key to re-encrypt existing sensitive data with the active key or generate a new key. This opens the Change Encryption Key screen with options for New and Re-encrypt.

New. This button generates a new key across the schema for all newly entered sensitive data from this time onward. This button is not available (greyed out) once the Re-encrypt button is clicked and is running. The New button can be used without following with Re-encrypt, which allows all newly entered sensitive data to be stored with the new key and the existing sensitive data is encrypted with the previous key (multiple key support).

Re-encrypt. This button re-encrypts all the existing sensitive data with the current active key at the schema level (all Chains and all the properties belonging to them). This button can be used without first initializing New. A Re-encrypt status bar appears when the re-encryption process is running.

Users can be in the system during either process.