The capability of using symmetric encryption was introduced by the Carbon 4.4.3 version. Therefore, note that this feature does not apply to products that were released prior to Carbon 4.4.3.

WSO2 Carbon-based products use asymmetric encryption by default as explained in the previous section. From Carbon 4.4.3 onwards, you have the option of switching to symmetric encryption in your WSO2 product. Using symmetric encryption means that a single key will be shared for encryption and decryption of information.

Follow the steps given below to enable symmetric encryption.

- Open the
`carbon.xml`

file from the`<PRODUCT_HOME>/repository/conf`

directory. Add the following properties:

<SymmetricEncryption> <IsEnabled>true</IsEnabled> <Algorithm>AES</Algorithm> <SecureVaultAlias>symmetric.key.value</SecureVaultAlias> </SymmetricEncryption>

The

`IsEnabled`

property is used to set symmetric encryption to '`true`

' or '`false`

'.- The
`Algorithm`

property specifies the symmetric key algorithm used. - The
`SecureVaultAlias`

property is used to specify the secret alias if secure vault has been used to encrypt the secret key.

Create a file named '

`symmetric-key.properties`

' in the`<PRODUCT_HOME>/repository/resources/security`

folder and enter the symmetric key using the`symmetric.key`

property. See the following example where a plain text key is entered in the`symmetric-key.properties`

file:symmetric.key=samplekeyvalue

If Secure Vault has been used for encrypting the symmetric key, this value will be replaced by the secret alias as shown below. For detailed instructions on how the secret key can be encrypted using Secure Vault, see Encrypting Passwords with Cipher Tool.

symmetric.key=secretAlias:symmetric.key.value