Setting The Key Size In The Certkeysize Security Policy; Setting The Key Size In Mkhost - Oracle Secure Backup Installation And Configuration Manual

You can set the key size in the obparameters file when you install Oracle Secure
Backup on the administrative
interactively, the install script gives you an opportunity to modify the obparameters
file.
To set the key size in obparameters when installing interactively:
Before running the install script on the administrative server, or when the install
1.
script prompts you to modify obparameters, open the file in a text editor.
Search for the following string: certificate key size. Set the key size to the
2.
desired default value. The following example sets the default key size to 2048 bits:
identity certificate key size: 2048
Save and close the file after making any other changes to obparameters.
3.
Proceed with the installation.
4.
Oracle Secure Backup uses the key size in obparameters to set the initial value for
the certkeysize security policy. This security policy specifies the default security
key size for hosts in the domain. You can change or override this default when
configuring an individual host.
There is no equivalent procedure for Windows. Windows
Note:
users are restricted to the default value.
Appendix B, "Oracle Secure Backup obparameters
See Also:
Installation Parameters"

Setting the Key Size in the certkeysize Security Policy

You can change the default key size in the security policy at any time. Any hosts
configured after the change default to the changed key size.
You can set the key size in the certkeysize security policy through
Oracle Secure Backup Web
next time you configure a host. You can change the certkeysize value at any time,
but the change only applies to the next mkhost command.
To set the certkeysize security policy:
Log in to obtool as a user with the modify administrative domain's
1.
configuration right.
Set the certkeysize policy to the desired default value. The following example
2.
shows how to use obtool to set the key size to 3072 bits:
ob> cdp security
ob> setp certkeysize 3072
See Also: Oracle Secure Backup Administrator's Guide to learn how to
set a policy

Setting the Key Size in mkhost

You can override the default key size for any individual host. Different hosts in the
domain can have different key sizes.
Configuring Security for the Administrative Domain
server. When you install Oracle Secure Backup
tool. Oracle Secure Backup uses the modified key size the
Managing Security for Backup Networks 6-19
obtool or the