Provide a custom encryption key for a fresh installation

Supply your own encryption key before starting Red Hat Edge Manager services on Red Hat Enterprise Linux. If a key already exists at the expected path, Red Hat Edge Manager keeps it and does not generate a replacement key, so no rotation or migration is needed.

Before you begin

  • You have root or sudo access on the Red Hat Enterprise Linux host.
  • You have generated a base64-encoded 32-byte random value for the encryption key.

Procedure

  1. Create the encryption key directory and place the key file: 
    $ sudo mkdir -p /etc/flightctl/encryption
$ sudo install -m 0600 <path_to_your_key_file> /etc/flightctl/encryption/key
  2. Proceed with the Red Hat Edge Manager installation. The installer detects the existing key and does not generate a new one.

Results

  • Verify that the key file exists and has the correct permissions: 
    $ sudo ls -la /etc/flightctl/encryption/key

    The file permissions should show -rw------- (read/write for the owner only).