I would like my agent to read an encrypted value … the id which is used to sign the agent has the public key available to decrypt the value.
Still when the server runs the agent the value cannot be read, I guess this is because the public key is stored inside the ID file ?
Anybody knows if it is possible, or can tell my to accomplish this …
Great thanks
Subject: Read encrypted value
This depends on what kind of encryption you are talking about.
Are you talking about FIELD LEVEL encryption (which uses an encryption key in the user’s ID file). Your document should have a field called SecretEncryptionKeys if this is the case.
OR
Are you talking about Public-Private key encryption which happens when a document is mailed?
Subject: RE: Read encrypted value
Hey Melissa,
I have one field encrypted with an encryption key I have created from my ID file …
Subject: RE: Read encrypted value
Right - that is nothing to do with public-private keys.
Only ID files that contain the encryption key that you created in your ID file will be able to read the data.
I haven’t tried this in a live situation so STRONGLY suggest you try in test environment first as I won’t accept responsibility if all goes pear-shaped, but suspect you will need to sign your agent with the server id file. Export the encryption key from your ID file and then use the Notes Admin client → Configuration Tab → Certification ->ID file properties and import the secret encryption key into the server’s ID file.
You will need to shut down the server in order to replace the server ID file.
The server can then run the agent and because the server’s ID file contains the envryption key required to see the data.
Subject: RE: Read encrypted value
Hey Melissa,
I’ll let you know if it works or not …
Great thanks
Subject: RE: Read encrypted value
Once you have done that, your agent will have to DECRYPT the NotesDocument to get at the encrypted values (as this is not automatic for agents - it is automatic when the UI opens a document).
If you are going to change and save the document, then you’ll need to reencrypt the document first.