Exporting and importing encryption settings

Encryption settings can be exported to a password-protected text file with the OneSpan Authentication Server Maintenance Wizard on the first OneSpan Authentication Server instance installed (via Export Key Data).

This file must be loaded during initial configuration of each additional OneSpan Authentication Server instance.

When you copy, migrate, or back up encrypted database files, ensure that you also back up the encryption key (and/or the optional password key). Otherwise, you will not be able to read the data afterward, as it will be encrypted.

Exporting encryption settings

To export key data

1. Start the Maintenance Wizard.
2. Click Export Key Data.
3. Type the credentials as requested in the input window.
4. Click Next.
5. Type the name and location for the encryption key file (with an .esf file extension) and supply a password.
6. Click Next.
7. Click Proceed.

Importing encryption settings

The encryption key file must be exported before installing any OneSpan Authentication Server instances after the first one. This step is mandatory if you are intending to use replication between the OneSpan Authentication Server instances you are installing.

When installing a new OneSpan Authentication Server instance you will have the opportunity to import the file exported above only for the first run of the Maintenance Wizard. This means that you must have this file available before starting the installation.

When you get to the Sensitive Data Encryption page of the Maintenance Wizard, click Load from file and provide the name and location of the file previously exported.