Enabling Job Encryption for InfoPrint Manager for Linux
- Stop all running instances of InfoPrint Manager. In interoperated environments, stop all running instances of InfoPrint Manager on all interoperated machines.
- Copy the sample configuration file,
ipm-file-encryption.cfg
, from/usr/lpp/pd/cfg-samples/file-encryption
directory to/var/pddir/default_cell/crypto
directory. - Uncomment and set
EnableFileEncryption
to 1. - Uncomment and set
Cipher
to the desired cipher to use for encryption. -
- Note:
- The list of available ciphers can be obtained by running the following command:
openssl-ipm enc -ciphers
Do not include the first character ('-') from the cipher name. - If you use an AES cipher, having a processor that supports hardware encryption, AES instruction set, speeds up the encryption/decryption time. For the AES instruction set, see https://software.intel.com/content/www/us/en/develop/articles/intel-advanced-encryption-standard-instructions-aes-ni.html.
- The list of available ciphers can be obtained by running the following command:
- Run
pdenc_jobs
as the user that runs InfoPrint Manager or root. In interoperated environments, runpdenc_jobs
sequentially on all interoperated machines. - Start all instances of InfoPrint Manager or reboot.
- Important:
- Do not change the cipher in the
ipm-file-encryption.cfg
configuration file once encryption has been enabled. To change the cipher, follow the procedure in Disabling Job Encryption for InfoPrint Manager for Linux, change the cipher in theipm-file-encryption.cfg
configuration file, and then follow the procedure to enable Job Encryption for InfoPrint Manager. - Do not remove the
ipm-file-encryption.dat
file once encryption has been enabled. This file is stored in the same directory as theipm-file-encryption.cfg
configuration file. - Before running
pdenc_jobs
, make sure that there is at least1.5* (size of jobs + rip files)
free space available on the partition where jobs are stored.