Generating Profile Encryption Keys

The following steps will allow you to generate profile encryption keys for your site so that data such as passwords and credit card numbers can be securely stored. These steps are based on the assumption that your Commerce Server site name is CSSolutionStorefrontSite. If you are using a different site name, please substitute your own site name where appropriate.

  1. Start Windows, click the Start button, search for "tools command prompt", and then click Tools command prompt.

  2. Generate the encryption keys and save them to a file for use in later steps. Enter the following command in the command prompt window: ProfileKeyManager.exe /kn /o "c:\profileEncryptionKeys.xml" /f.

  3. Add the previously-created encryption keys to the registry, so the Commerce Server Profile System can read them at run time. Do this against the 32bit part of the registry by running the following command: ProfileKeyManager.exe /ke /kf "c:\profileEncryptionKeys.xml" /reg HKEY_LOCAL_MACHINE\SOFTWARE\CommerceServer\Encryption\Keys\CSSolutionStorefrontSite /f.

  4. Add the previously-created encryption keys to the registry, so the Commerce Server Profile System can read them at run time. Do this against the 64bit part of the registry by running the following command: ProfileKeyManager.exe /ke /kf "c:\profileEncryptionKeys.xml" /reg HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\CommerceServer\Encryption\Keys\CSSolutionStorefrontSite /f

  5. Now that the encryption keys are in place in the registry, make sure that the profile encryption keys section of the Sitecore web.config file has the correct registry path for the encryption keys.

  6. Make sure that the web.config entries for the profile webs service are pointing to the correct registry path.