Oracle DOCUCOLOR 252 ユーザーズマニュアル

Configuring Security for the Administrative Domain

Managing Security for Backup Networks

You can set the key size in the obparameters file when you install Oracle Secure 
Backup on the 

. When you install Oracle Secure Backup 

interactively, the install script gives you an opportunity to modify the obparameters 
file.

To set the key size in obparameters when installing interactively:

Before running the install script on the administrative server, or when the install 
script prompts you to modify obparameters, open the file in a text editor.

Search for the following string: certificate key size. Set the key size to the 
desired default value. The following example sets the default key size to 2048 bits:

identity certificate key size: 2048

Save and close the file after making any other changes to obparameters.

Proceed with the installation.

Oracle Secure Backup uses the key size in obparameters to set the initial value for 
the certkeysize security policy. This security policy specifies the default security 
key size for hosts in the domain. You can change or override this default when 
configuring an individual host.

You can change the default key size in the security policy at any time. Any hosts 
configured after the change default to the changed key size.

You can set the key size in the certkeysize security policy through 

 or the 

Oracle Secure Backup 

. Oracle Secure Backup uses the modified key size the 

next time you configure a host. You can change the certkeysize value at any time, 
but the change only applies to the next mkhost command.

To set the certkeysize security policy:

Log in to obtool as a user with the modify administrative domain's 
configuration

 right.

Set the certkeysize policy to the desired default value. The following example 
shows how to use obtool to set the key size to 3072 bits:

ob> cdp security

ob> setp certkeysize 3072

You can override the default key size for any individual host. Different hosts in the 
domain can have different key sizes.

There is no equivalent procedure for Windows. Windows 

users are restricted to the default value.

Oracle Secure Backup Administrator's Guide to learn how to 

set a policy