PeopleSync Knowledge Base

How to Change the Secret Key

This article explains how to change the PeopleSync secret key.

The passwords for service and action accounts are stored in encrypted form in the PeopleSync database. They are encrypted or decrypted with the PeopleSync secret key.

Therefore, on all servers running the PeopleSync Console or PeopleSync Service, the secret key must be set with the PeopleSync Encryption Configurator. All servers must have the same secret key.

If you change the secret key, you must delete and re-enter all passwords in the PeopleSync database.

Passwords encrypted with the old secret key can no longer be decrypted by PeopleSync.

📘 Instructions

The secret key can be changed as follows:

  1. Make a backup of the PeopleSync database.

  2. Close all PeopleSync Consoles and stop the PeopleSync Service on the backend.

  3. Open SQL Server Management Studio.

  4. Connect to the PeopleSync database and run the following statement:
    warning The following statement will delete all passwords in the PeopleSync database.

    SQL
    update ActionAccount
    set Password = null;
    
    update ServiceAccount
    set Password = null;
    
    update SystemSettings
    set lDAPPassword = null;
    


  5. Open PeopleSync Console.

  6. Go to Address Lists > Service Accounts.

  7. Open each service account and re-enter the password for the account.

  8. Go to Agents > Action Accounts.

  9. Open each action account and re-enter the password for the account.

  10. Go to System Settings.

  11. If “Enable Address Lists” is enabled, re-enter the LDAP password.

  12. Start the PeopleSync Service.