Use this page to configure when the randomly generated encryption key is changed.
Click Reports > Settings on the home page of the console.
Click Encryption Settings in the task pane.
The NULL Cipher (clear text) key is enabled at Reports > Settings > Encryption Settings by default.
If the you want to encrypt the databases then you must first disable the null cipher and then change the database to encryption and save, Privileged Account Manager encrypts all the databases, which has the Protection set to Encrypted in Reports > Settings > Audit Settings, with the latest key. This can be very time-intensive and can affect performance until it is completed.
To specify how frequently the key is changed, move the Key Rollover slider to the right and specify a Key Rollover interval by selecting the type of interval (years, months, weeks, or days).
(Optional) In the Encryption Keys list, disable or enable keys by moving the slider to the right or left against the respective Key ID.
Each time a new key is generated, it is added to the list.
If you disable a previous key, Privileged Account Manager re-encrypts all databases with the old key to the latest key. This can be very time-intensive and can affect performance until it is completed.
If you disable the null cipher key, Privileged Account Manager encrypts all the databases, which has the Protection set to Encrypted in Reports > Settings > Audit Settings, with the latest key. This can be very time-intensive and can affect performance until it is completed.
Click Finish.