...

JOC Cockpit offers to centrally manage Certificates while Private Keys remain with Agents. For creation of Encryption Keys see JS7 - How to create X.509 Encryption Keys.

Certificates can be used to encrypt and to decrypt values of variables assigned any workflowworkflows, job jobs or orderorders, see JS7 - Encryption - Integration with Workflows , - Jobs and - Orders.

...

Managing Encryption Keys

The administrative menu of JOC Cockpit offers to Manage Encryption Keys:

...

• The Job Resource makes use of the Certificate Alias name. Users should consider that object names in the JS7 inventory are unique.
• The Job Resource holds the following variables:
  • encipherment_certificate: holds the Certificate/Public Key.
  • encipherment_private_key_path: holds the Path to Private Key File. The Private Key file must be available for the Agent(s) that which perform decryption.
• The Job Resource can be assigned any jobs that use encrypted secrets. It will be deployed by the Controller to any Agents assigned the Job Resource. The Agent will make use of the Job Resource to identify the path to the Private Key used to decrypt secrets for example from variables.

Anchor
assigning_certificates_to_agents assigning_certificates_to_agents

Managing Certificates for Agents

The administrative menu of JOC Cockpit offers to Manage Controllers/Agents from the following page:

Assigning Certificates to Agents

...

The list of Standalone Agents and Cluster Agents includes displays the Certificates column  column.

Users can click the icon to make the list of Certificate Aliases available that are assigned the given Agent:

...

• JS7 - Encryption and Decryption
  • JS7 - Encryption - Management of Encryption Keys
  • JS7 - Encryption - Integration with Workflows - Jobs - Orders
• JS7 - How to create X.509 Encryption Keys
• JS7 - How to encrypt and decrypt

...