How to configure encryption in a peer-to-peer environment.
General Information.
Note: these steps assume that 'A' is the Trusted Source and 'B' is the Target.
1. Enable encryption from 'A' to 'B', as follows:
On 'A':
sp_ctrl> stop export
sp_ctrl> show -- repeat until Export displays 'stopped by user'
sp_ctrl> set param SP_XPT_ENABLE_AES 1
sp_ctrl> start export
sp_ctrl> show -- you will see that Export is idle - this is because the encryption key has not been set
On 'B':
sp_ctrl> stop import
sp_ctrl> show -- repeat until Import displays 'stopped by user'
sp_ctrl> set param SP_IMP_ENABLE_AES 1
sp_ctrl> start import
sp_ctrl> show -- you will see that Import is idle - this is because the encryption key had not been set
2. Enable encryption from 'B' to 'A', as follows:
On 'B':
sp_ctrl> stop export
sp_ctrl> show -- repeat until Export displays 'stopped by user'
sp_ctrl> set param SP_XPT_ENABLE_AES 1
sp_ctrl> start export
sp_ctrl> show -- you will see that Export is idle - this is because the encryption key has not been set
On 'A':
sp_ctrl> stop import
sp_ctrl> show -- repeat until Import displays 'stopped by user'
sp_ctrl> set param SP_IMP_ENABLE_AES 1
sp_ctrl> start import
sp_ctrl> show -- you will see that Import is idle - this is because the encryption key had not been set
3. Create or set the encryption key on 'A'.
You can either create an encryption key or just use your own key value, as follows:
sp_ctrl> create encryption key
sp_ctrl> set encryption key <value> -- <value> can be the value returned by the key creation or a value you have created manually.
4. Set the encryption key on 'B', as follows:
sp_ctrl> set encryption key <value>
The encryption key value must be set to the same on 'A' and 'B'.
5. Stop and restart Export and Import on both 'A' and 'B'.
sp_ctrl> stop export
sp_ctrl> stop import
sp_ctrl> start export
sp_ctrl> start import
Encryption is now enabled and running in the peer-to-peer environment.
