Re: Master Key on new Navigator

Master Key for Navigator.

On the GUI node – ie the system that you are connecting to from the browser. You have the option to leverage user credentials saved in an encrypted file ( not recommended…but easy for administrators with many systems and different credential information) as well as you have the ability to connect to end point IBM i securely. The certificate information we consider to be data that needs to be secure. We are putting that certificate into a Java Trust store on the GUI node. To protect the items mentioned above as well as other configuration info, we are using cryptographic services and specifically master key 1 as the seed to create the encryption key used to encrypt the data and of course decrypt to read and leverage that data.

So that is why Master Key1 needs to be set. It is for the GUI node, and for that system. The certificate trust store is used by both Navigator and the Db2 Mirror GUI to store certificates used when making secure connections to endpoint nodes.

Thanks Tim

[Logo Description automatically generated]Tim Rowe - timmr@xxxxxxxxxx<mailto:timmr@xxxxxxxxxx>
STSM – Application Development & Systems Management
IBM i ISV Council
IBM i Development Lab, Rochester MN
507-250-1293

ACS - http://ibm.biz/IBMi_ACS
Navigator - http://ibm.biz/IBMi_Nav4i

*********************************