HP VAN SDN Controller Administrator Guide

45
4. Repeat for the other two components.
Figure 40 Components that Reference Controller Keystore and Truststore
The values for keystore and keystore.password contain the keystore location and encrypted
keystore password respectively. The values for truststore and truststore.password contain the
truststore location and encrypted truststore password respectively.
Configuration Encryption
Sensitive information such as tokens and passwords are stored encrypted on the SDN controller.
However, to encrypt and decrypt these properties, the controller requires a master key that is
passed into the controller upstart script via an environment variable. To change the default
master key (recommended):
1. First, stop these services:
sudo service sdnc stop
sudo service sdna stop
2. Then change the default master key:
sudo /opt/sdn/admin/sdnpass <old master key> <new master key>