Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 3 Next »

Applies to: (tick) Kyvos Enterprise  (tick) Kyvos Cloud (SaaS on AWS) (tick) Kyvos AWS Marketplace

(tick) Kyvos Azure Marketplace   (tick) Kyvos GCP Marketplace (tick) Kyvos Single Node Installation (Kyvos SNI)


Note

From Kyvos 2023.3 onwards, you can see the last operation details, including progress status and start time.  To view more comprehensive details, simply click the  View Details link, which will take you to the Operations page where you can view the operation information in detail. 

The Manage Credentials feature in Kyvos Manager enables you to:

Functionality

AWS

Azure

GCP

On-prem

Change Node Authentication

(tick)

(tick)

(tick)

(tick)

Change Repository Password

(tick)

(tick)

(tick)

(tick)

Change Password Storage

(tick)

(error)

(tick)

(error)

Change Password Encryption

(tick)

(tick)

(tick)

(tick)

Changing Repository Password

This feature allows you to change the Kyvos repository password provided at the time of cluster deployment. The BI Server uses this password to connect to the Kyvos repository.

To change the password, perform the following steps.

  1. On the Kyvos Manager navigation pane, click Manage Credentials.

  2. Click Change repository password.

  3. On the displayed Change Repository Password dialog box, provide the Current Password, New Password, and Confirm New Password.

  4. Provide Kyvos Manager Password to continue.

  5. Click the Save button to save your change.

Note

You MUST restart the BI Server to bring the new password into effect.

Changing Password Encryption

You can change password encryption to  configure a cryptographic algorithm at the application level.  All sensitive information stored in the Azure Key Vault or AWS Secrets Manager is also encrypted using the cryptographic algorithm.
To change the password encryption, perform the following steps.

  1. On the Kyvos Manager navigation pane, click Manage Credentials.

  2. Click Change repository password.

  3. On the displayed Encryption Algorithm dialog box, select the encryption from any of the following options.

Note

Kyvos supports both 128 and 256 versions for all the supported algorithms. 

  1. DEFAULT: MD5 encryption for Kyvos user login password and DES for saved passwords for other services.

  2. AES_CBC: In this mode, each ciphertext block is dependent on all plain text blocks processed up to that point. Kyvos supports both 128 and 256 variants for this.

  3. AES_CFB: This mode can be used as a stream cipher. First, it encrypts the IV, and then it will xor with the plain text block to get ciphertext. Then CFB encrypts the encryption result to xor the plain text. It needs an IV. Kyvos supports both 128 and 256 variants for this.

  4. AES_GCM: This mode operates by XOR'ing (eXclusive OR) each block with the previous block and cannot be written in parallel. Kyvos supports both 128 and 256 variants for this.

  5. Provide Kyvos Manager Password to continue.

  6. Click the Save button to save your changes.

Note

You MUST restart the BI Server to bring the new password encryption algorithm into effect.

Changing Password Storage

Kyvos Manager allows you to migrate your repository passwords (like SMTP, LDAP, Repository, OIDC, etc.) from the configuration file to a secrets manager like AWS Secrets Manager, Azure Key Vault, or GCP Secrets Manager.

Note

Once you migrate your passwords to a secret store, you cannot switch back to the configuration file.


  • No labels