Setting the custom key for encryption - 8.0

Talend Installation Guide

Operating system
Subscription type
Talend Big Data
Talend Big Data Platform
Talend Data Fabric
Talend Data Integration
Talend Data Management Platform
Talend Data Services Platform
Talend ESB
Talend MDM Platform
Talend Real-Time Big Data Platform
Talend Activity Monitoring Console
Talend Administration Center
Talend Artifact Repository
Talend CommandLine
Talend Data Preparation
Talend Data Stewardship
Talend ESB
Talend Identity and Access Management
Talend Installer
Talend JobServer
Talend LogServer
Talend MDM Server
Talend MDM Web UI
Talend Runtime
Talend SAP RFC Server
Talend Studio
Installation and Upgrade
Last publication date
In the <tomcat_path>\WEB-INF\classes\ file, the master.key parameter is mandatory for encoding and decoding all sensitive information. If this parameter is missing, Talend Administration Center can not work properly.

After the installation of Talend Administration Center, it is mandatory to rotate the master key. To do so:

  1. In the Database Configuration page of Talend Administration Center, click Change master key.
  2. Enter text (there is no limitation for text) in the Change master key field and click Launch Key Rotation.
    The new master key will be hashed in SHA256, encoded in base256 and saved in <tomcat_path>\WEB-INF\classes\ The property with information when this master key was last used is also added. For example,
    2020-08-19-17-40 is the identifier of the new master key which contains the master key creation time just to understand which master key is the latest.

    Re-encryption of sensitive data will be started and execution of master key rotation will be logged in accordance to logging configuration. For more information, see Setting up the Logging parameters.

    You can clean unused master keys manually or configure automatic cleaner in database by enabling master.key.cleaner to positive number. By default automatic master key cleaner is disabled. The value of master.key.cleaner means the quantity of days when master key is unused before it is cleaned. The latest master key will be never deleted.


    master.key.*** properties cannot be changed or added directly in <tomcat_path>\WEB-INF\classes\ You can only delete unused ones.

    If you have the same master.key.*** name, you need to do the rotation on one of the databases, and delete old master keys.

If your Talend Administration Center is in cluster mode, proceed as follow to rotate the master key:

  1. Stop all Talend Administration Center nodes in the cluster except the one where master key rotation will be executed.
  2. Start the master key rotation in the Database Configuration page.
  3. Copy the new master key master.key.YYYY-MM-dd-HH-ss that is generated in the <tomcat_path>\WEB-INF\classes\ file to the of all Talend Administration Center nodes.
  4. Start the Talend Administration Center nodes that have been stopped.