...

• JS7 - Encryption and Decryption can be performed directly by scripts that are used outside of JS7 products or by related jobs.
• No JS7 product is directly involved in encryption/decryption as otherwise the JS7 product would know the keys involved that potentially could be compromised by logging, database persistence etc.
• Performing encryption/decryption by jobs limits the attack surface to the OS process executing the job. The job implementation is controlled by the user who can verify secure operation.

For creation of Encryption Keys see JS7 - How to create X.509 Encryption Keys.

Asymmetric Keys

Encryption and decryption use asymmetric keys, for details see JS7 - Encryption and Decryption:

...