If password encryption is enabled in the configuration
properties file, bfpwcrypt.conf, use the steps in this topic after
you change from SHA1 to SHA2.
Procedure
- Navigate to , and disable password
encryption.
- If the Server Auth, LDAP, and User passwords have been
added or updated since password encryption was enabled, go to and update each of the
passwords again.
- Rename the password encryption configuration properties
file. For example, change the name of the bfpwcrypt.conf
file to bfpwcrypt.conf.sha1
- Go back to , and change the Digest
Algorithm to SHA2.
- Restart the Build
Forge® management
console. A new bfpwcrypt.conf file is created.
- Go back to , and enable password
encryption.
- Optional: Go back to and update the ServerAuth, LDAP, and User passwords.
- If the agent also enables password encryption, copy the
newly generated bfpwcrypt.conf file to the server where the agent
is located.
- If the ssl_key_password was encrypted, re-encrypt the password. For example, re-encrypt bfagent -e xxxxxx. In this example, xxxxxx represents
the password.
- In the bfagent.conf file, enable digest_algorithm
SHA2 by removing the # before the line or by adding a new
line.
- Restart the bfagent.