The following steps will allow you to generate profile encryption keys for your site so that
data such as passwords and credit card numbers can be securely stored. These steps are based on
the assumption that your Commerce Server site name is
CSSolutionStorefrontSite. If you are using a different site name, please
substitute your own site name where appropriate.
- Start Windows, click the Start button, search for "tools command
prompt", and then click Tools command prompt.

- Generate the encryption keys and save them to a file for use in later steps. Enter the
following command in the command prompt window: ProfileKeyManager.exe /kn /o
"c:\profileEncryptionKeys.xml" /f.

- Add the previously-created encryption keys to the registry, so the Commerce Server Profile
System can read them at run time. Do this against the 32bit part of the registry by running the
following command: ProfileKeyManager.exe /ke /kf "c:\profileEncryptionKeys.xml" /reg
HKEY_LOCAL_MACHINE\SOFTWARE\CommerceServer\Encryption\Keys\CSSolutionStorefrontSite
/f.

- Add the previously-created encryption keys to the registry, so the Commerce Server Profile
System can read them at run time. Do this against the 64bit part of the registry by running the
following command: ProfileKeyManager.exe /ke /kf "c:\profileEncryptionKeys.xml" /reg
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\CommerceServer\Encryption\Keys\CSSolutionStorefrontSite
/f

- Now that the encryption keys are in place in the registry, make sure that the profile
encryption keys section of the Sitecore web.config file has the correct registry path for the
encryption keys.

- Make sure that the web.config entries for the profile webs service are pointing to the
correct registry path.
