{"id":14205,"date":"2020-05-27T18:00:17","date_gmt":"2020-05-27T16:00:17","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/"},"modified":"2020-05-27T18:00:17","modified_gmt":"2020-05-27T16:00:17","slug":"documentum-upgrade-switch-from-lockbox-to-aek-key","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/","title":{"rendered":"Documentum Upgrade &#8211; Switch from Lockbox to AEK key"},"content":{"rendered":"<p>As you probably know already, Documentum removed the support for RSA Libraries and RSA Lockbox starting with Documentum version 16.7. This means that if you are planning to upgrade to 16.7 or higher versions, you will first need to remove the lockbox from your installation and extract your AEK key from it before starting the upgrade process. To be completely exact, upgrading to 16.7 or above in place (using VMs for example) is normally going to do that for you but if you are using the docker images from OpenText, it&#8217;s not going to happen. Therefore, it is always good to know how to do it anyway.<\/p>\n<p>The process to &#8220;downgrade&#8221; from the Lockbox to the AEK key (the other way around wasn&#8217;t really an upgrade in terms of security anyway&#8230;) is pretty simple and if I&#8217;m not mistaken, it is now in the Upgrade &amp; Migration Guide of Documentum 16.7. This can be prepared while the repository is running but it will require a quick restart to be applied. If you are facing any issue, you can also go back to the Lockbox first and figuring out what the issue is later.<\/p>\n<p>It&#8217;s very simple and straightforward to extract the AEK key from the Lockbox but there is one requirement to met. Indeed, you will need the latest version of the dm_crypto_create utility which has been packaged starting with:<\/p>\n<ul style=\"margin-top: -27px\">\n<li>Documentum 7.2 P42<\/li>\n<li>Documentum 7.3 P23<\/li>\n<li>Documentum 16.4 P10<\/li>\n<\/ul>\n<p>If you are using an older version or an older patch, you will first need to upgrade\/patch to one of these versions. It **might** be possible to just take the binary from one of these patches and use it on older versions of Documentum but that is probably not supported and it would need to be tested first to make sure it doesn&#8217;t break in the process. If you want to test that, just make sure to use the correct version of Lockbox libraries (version 3.1 for CS 7.3 and lower \/\/ version 4.0 for CS 16.4).<\/p>\n<p>Once you are with the correct version\/patch level, the extraction is just one simple command. Therefore, it can be automated easily in the upgrade process. Before starting, let&#8217;s setup\/prepare the environment and making sure all is currently working with the Lockbox. I&#8217;m using a demo environment I built a few weeks on Kubernetes to show how it works:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1; highlight: [18,19,25,40,46]\">[dmadmin@cs-0 ~]$ cd $DOCUMENTUM\/dba\n[dmadmin@cs-0 dba]$\n[dmadmin@cs-0 dba]$ cp -R secure secure_$(date \"+%Y%m%d\")\n[dmadmin@cs-0 dba]$\n[dmadmin@cs-0 dba]$ cd secure\n[dmadmin@cs-0 secure]$ ls -ltr\ntotal 24\n-rw-rw-r-- 1 dmadmin dmadmin 3750 Mar 30 13:30 lockbox.lb\n-rw-rw-r-- 1 dmadmin dmadmin    3 Mar 30 13:30 lockbox.lb.FCD\ndrwxrwx--- 2 dmadmin dmadmin  152 Mar 30 17:41 ldapdb\n[dmadmin@cs-0 secure]$\n[dmadmin@cs-0 secure]$ gr_repo=\"GR_REPO1\"\n[dmadmin@cs-0 secure]$ s_ini=\"$DOCUMENTUM\/dba\/config\/${gr_repo}\/server.ini\"\n[dmadmin@cs-0 secure]$ \n[dmadmin@cs-0 secure]$ grep \"crypto\" ${s_ini}\ncrypto_mode = AES256_RSA1024_SHA256\ncrypto_keystore = Local\ncrypto_lockbox = lockbox.lb\ncrypto_keyname = CSaek\n[dmadmin@cs-0 secure]$\n[dmadmin@cs-0 secure]$ lb_name=$(grep \"^crypto_lockbox\" ${s_ini} | sed 's,crypto_lockbox[[:space:]]*=[[:space:]]*,,')\n[dmadmin@cs-0 secure]$ aek_name=$(grep \"^crypto_keyname\" ${s_ini} | sed 's,crypto_keyname[[:space:]]*=[[:space:]]*,,')\n[dmadmin@cs-0 secure]$\n[dmadmin@cs-0 secure]$ echo \"Lockbox Name: ${lb_name} -- AEK Name: ${aek_name}\"\nLockbox Name: lockbox.lb -- AEK Name: CSaek\n[dmadmin@cs-0 secure]$\n[dmadmin@cs-0 secure]$ read -s -p \"  --&gt; Please put here the Lockbox Passphrase and press Enter: \" lb_pp; echo\n  --&gt; Please put here the Lockbox Passphrase and press Enter:\n[dmadmin@cs-0 secure]$\n[dmadmin@cs-0 secure]$ read -s -p \"  --&gt; Please put here the AEK Passphrase and press Enter: \" aek_pp; echo\n  --&gt; Please put here the AEK Passphrase and press Enter:\n[dmadmin@cs-0 secure]$\n[dmadmin@cs-0 secure]$ # If the below command returns '0', then the Lockbox name, AEK passphrase and the AEK Key name are correct\n[dmadmin@cs-0 secure]$ # but it doesn't really test the Lockbox passphrase\n[dmadmin@cs-0 secure]$ dm_crypto_create -lockbox ${lb_name} -lockboxpassphrase ${lb_pp} -keyname ${aek_name} -passphrase ${aek_pp} -check\n\n\nKey - CSaek uses algorithm AES_256_CBC.\n\n** An AEK store with the given passphrase exists in lockbox lockbox.lb and got status code returned as '0'.\n[dmadmin@cs-0 secure]$\n[dmadmin@cs-0 secure]$ # If the below command returns 'Reset host done', then the Lockbox name and Lockbox passphrase are both correct\n[dmadmin@cs-0 secure]$ dm_crypto_manage_lockbox -lockbox ${lb_name} -lockboxpassphrase ${lb_pp} -resetfingerprint\nLockbox lockbox.lb\nLockbox Path $DOCUMENTUM\/dba\/secure\/lockbox.lb\nReset host done\n[dmadmin@cs-0 secure]$<\/pre>\n<p>&nbsp;<\/p>\n<p>Once everything is ready &amp; verified, extracting the AEK key is a piece of cake:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1; highlight: [5,12]\">[dmadmin@cs-0 secure]$ # AEK passphrase isn't needed to extract the AEK key\n[dmadmin@cs-0 secure]$ dm_crypto_create -lockbox ${lb_name} -lockboxpassphrase ${lb_pp} -keyname ${aek_name} -removelockbox -output ${aek_name}\n\n\nRetrieved key 'CSaek' from lockbox 'lockbox.lb' and stored as '$DOCUMENTUM\/dba\/secure\/CSaek'\n[dmadmin@cs-0 secure]$\n[dmadmin@cs-0 secure]$ ls -ltr\ntotal 24\n-rw-rw-r-- 1 dmadmin dmadmin 3750 Mar 30 13:30 lockbox.lb\n-rw-rw-r-- 1 dmadmin dmadmin    3 Mar 30 13:30 lockbox.lb.FCD\ndrwxrwx--- 2 dmadmin dmadmin  152 Mar 30 17:41 ldapdb\n-rw-r----- 1 dmadmin dmadmin  144 May  8 21:52 CSaek\n[dmadmin@cs-0 secure]$<\/pre>\n<p>&nbsp;<\/p>\n<p>When it&#8217;s done, a new file has been created with the name specified in the &#8220;<em>-output<\/em>&#8221; parameter (<em>${aek_name}<\/em> above, meaning &#8220;<em>CSaek<\/em>&#8220;). The only remaining step is reflecting this change in the <em>server.ini<\/em> and restarting the repository:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1; highlight: [4,12,16,46]\">[dmadmin@cs-0 secure]$ grep \"crypto\" ${s_ini}\ncrypto_mode = AES256_RSA1024_SHA256\ncrypto_keystore = Local\ncrypto_lockbox = lockbox.lb\ncrypto_keyname = CSaek\n[dmadmin@cs-0 secure]$\n[dmadmin@cs-0 secure]$ sed -i 's,^crypto_lockbox,#&amp;,' ${s_ini}\n[dmadmin@cs-0 secure]$\n[dmadmin@cs-0 secure]$ grep \"crypto\" ${s_ini}\ncrypto_mode = AES256_RSA1024_SHA256\ncrypto_keystore = Local\n#crypto_lockbox = lockbox.lb\ncrypto_keyname = CSaek\n[dmadmin@cs-0 secure]$\n[dmadmin@cs-0 secure]$ \n[dmadmin@cs-0 secure]$ $DOCUMENTUM\/dba\/dm_shutdown_${gr_repo}\nStopping Documentum server for repository: [GR_REPO1]\n\n\n        OpenText Documentum iapi - Interactive API interface\n        Copyright (c) 2018. OpenText Corporation\n        All rights reserved.\n        Client Library Release 16.4.0200.0080\n\nConnecting to Server using docbase GR_REPO1.GR_REPO1\n[DM_SESSION_I_SESSION_START]info:  \"Session 010f123450009905 started for user dmadmin.\"\n\nConnected to OpenText Documentum Server running Release 16.4.0200.0256  Linux64.Oracle\nSession id is s0\nAPI&gt; shutdown,c,T,T\n...\nOK\nAPI&gt; exit\nBye\nWaiting for 90 seconds for server pid, 4188, to disappear.\n\nFri May  8 21:53:39 UTC 2020: Waiting for shutdown of repository: [GR_REPO1]\nFri May  8 21:53:39 UTC 2020: checking for pid: 4188\n\nFri May  8 21:53:49 UTC 2020: Waiting for shutdown of repository: [GR_REPO1]\nFri May  8 21:53:49 UTC 2020: checking for pid: 4188\n\nrepository: [GR_REPO1] has been shutdown\nchecking that all children (4214 4218 4219 4263 4305 4348 4542 4557 4584 4766) have shutdown\n[dmadmin@cs-0 secure]$\n[dmadmin@cs-0 secure]$ $DOCUMENTUM\/dba\/dm_start_${gr_repo}\nstarting Documentum server for repository: [GR_REPO1]\nwith server log: [$DOCUMENTUM\/dba\/log\/GR_REPO1.log]\nserver pid: 5055\n[dmadmin@cs-0 secure]$\n[dmadmin@cs-0 secure]$ head -20 $DOCUMENTUM\/dba\/log\/${gr_repo}.log\n\n\n    OpenText Documentum Content Server (version 16.4.0200.0256  Linux64.Oracle)\n    Copyright (c) 2018. OpenText Corporation\n    All rights reserved.\n\n2020-05-08T21:54:02.033346      5055[5055]      0000000000000000        [DM_SERVER_I_START_SERVER]info:  \"Docbase GR_REPO1 attempting to open\"\n\n2020-05-08T21:54:02.033471      5055[5055]      0000000000000000        [DM_SERVER_I_START_KEY_STORAGE_MODE]info:  \"Docbase GR_REPO1 is using database for cryptographic key storage\"\n\n2020-05-08T21:54:02.033507      5055[5055]      0000000000000000        [DM_SERVER_I_START_SERVER]info:  \"Docbase GR_REPO1 process identity: user(dmadmin)\"\n\n2020-05-08T21:54:02.833702      5055[5055]      0000000000000000        [DM_SESSION_I_INIT_BEGIN]info:  \"Initialize Post Upgrade Processing.\"\n\n2020-05-08T21:54:02.835032      5055[5055]      0000000000000000        [DM_SESSION_I_INIT_BEGIN]info:  \"Initialize Base Types.\"\n\n2020-05-08T21:54:02.837725      5055[5055]      0000000000000000        [DM_SESSION_I_INIT_BEGIN]info:  \"Initialize dmRecovery.\"\n\n2020-05-08T21:54:02.846022      5055[5055]      0000000000000000        [DM_SESSION_I_INIT_BEGIN]info:  \"Initialize dmACL.\"\n\n[dmadmin@cs-0 secure]$<\/pre>\n<p>&nbsp;<\/p>\n<p>That&#8217;s basically it. You are now running with the plain AEK Key just like before the introduction of the Lockbox a few years ago with the Documentum 7.x version.<\/p>\n<p>&nbsp;<\/p>\n<p>Maybe one last note on the &#8220;<em>dfc.crypto.repository<\/em>&#8221; property of the <em>dfc.properties<\/em>. As you might know, this property has been introduced to support the move to the lockbox so that Documentum knows which repository should be used for all crypto needs. This parameter should apparently stay, even if you remove the lockbox and continue with the AEK file only because the decryption logic is on the server side and so the DFC Clients still need to know which repository can help on that part. Maybe that will change though&#8230;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>As you probably know already, Documentum removed the support for RSA Libraries and RSA Lockbox starting with Documentum version 16.7. This means that if you are planning to upgrade to 16.7 or higher versions, you will first need to remove the lockbox from your installation and extract your AEK key from it before starting the [&hellip;]<\/p>\n","protected":false},"author":20,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[197,525],"tags":[1900,914,129,916],"type_dbi":[],"class_list":["post-14205","post","type-post","status-publish","format-standard","hentry","category-application-integration-middleware","category-enterprise-content-management","tag-16-7","tag-aek","tag-documentum","tag-lockbox"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.2 (Yoast SEO v27.2) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Documentum Upgrade - Switch from Lockbox to AEK key - dbi Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Documentum Upgrade - Switch from Lockbox to AEK key\" \/>\n<meta property=\"og:description\" content=\"As you probably know already, Documentum removed the support for RSA Libraries and RSA Lockbox starting with Documentum version 16.7. This means that if you are planning to upgrade to 16.7 or higher versions, you will first need to remove the lockbox from your installation and extract your AEK key from it before starting the [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/\" \/>\n<meta property=\"og:site_name\" content=\"dbi Blog\" \/>\n<meta property=\"article:published_time\" content=\"2020-05-27T16:00:17+00:00\" \/>\n<meta name=\"author\" content=\"Morgan Patou\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@MorganPatou\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Morgan Patou\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/\"},\"author\":{\"name\":\"Morgan Patou\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/c4d05b25843a9bc2ab20415dae6bd2d8\"},\"headline\":\"Documentum Upgrade &#8211; Switch from Lockbox to AEK key\",\"datePublished\":\"2020-05-27T16:00:17+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/\"},\"wordCount\":583,\"commentCount\":0,\"keywords\":[\"16.7\",\"Aek\",\"Documentum\",\"Lockbox\"],\"articleSection\":[\"Application integration &amp; Middleware\",\"Enterprise content management\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/\",\"name\":\"Documentum Upgrade - Switch from Lockbox to AEK key - dbi Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\"},\"datePublished\":\"2020-05-27T16:00:17+00:00\",\"author\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/c4d05b25843a9bc2ab20415dae6bd2d8\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/www.dbi-services.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Documentum Upgrade &#8211; Switch from Lockbox to AEK key\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/\",\"name\":\"dbi Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/c4d05b25843a9bc2ab20415dae6bd2d8\",\"name\":\"Morgan Patou\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g\",\"caption\":\"Morgan Patou\"},\"description\":\"Morgan Patou has over 12 years of experience in Enterprise Content Management (ECM) systems, with a strong focus in recent years on platforms such as Alfresco, Documentum, and M-Files. He specializes in the architecture, setup, customization, and maintenance of ECM infrastructures in complex &amp; critical environments. Morgan is well-versed in both engineering and operations aspects, including high availability design, system integration, and lifecycle management. He also has a solid foundation in open-source and proprietary technologies - ranging from Apache, OpenLDAP or Kerberos to enterprise-grade systems like WebLogic. Morgan Patou holds an Engineering Degree in Computer Science from ENSISA (\u00c9cole Nationale Sup\u00e9rieure d'Ing\u00e9nieurs Sud Alsace) in Mulhouse, France. He is Alfresco Content Services Certified Administrator (ACSCA), Alfresco Content Services Certified Engineer (ACSCE) as well as OpenText Documentum Certified Administrator. His industry experience spans the Public Sector, IT Services, Financial Services\/Banking, and the Pharmaceutical industry.\",\"sameAs\":[\"https:\/\/blog.dbi-services.com\/author\/morgan-patou\/\",\"https:\/\/x.com\/MorganPatou\"],\"url\":\"https:\/\/www.dbi-services.com\/blog\/author\/morgan-patou\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Documentum Upgrade - Switch from Lockbox to AEK key - dbi Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/","og_locale":"en_US","og_type":"article","og_title":"Documentum Upgrade - Switch from Lockbox to AEK key","og_description":"As you probably know already, Documentum removed the support for RSA Libraries and RSA Lockbox starting with Documentum version 16.7. This means that if you are planning to upgrade to 16.7 or higher versions, you will first need to remove the lockbox from your installation and extract your AEK key from it before starting the [&hellip;]","og_url":"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/","og_site_name":"dbi Blog","article_published_time":"2020-05-27T16:00:17+00:00","author":"Morgan Patou","twitter_card":"summary_large_image","twitter_creator":"@MorganPatou","twitter_misc":{"Written by":"Morgan Patou","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/#article","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/"},"author":{"name":"Morgan Patou","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/c4d05b25843a9bc2ab20415dae6bd2d8"},"headline":"Documentum Upgrade &#8211; Switch from Lockbox to AEK key","datePublished":"2020-05-27T16:00:17+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/"},"wordCount":583,"commentCount":0,"keywords":["16.7","Aek","Documentum","Lockbox"],"articleSection":["Application integration &amp; Middleware","Enterprise content management"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/","url":"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/","name":"Documentum Upgrade - Switch from Lockbox to AEK key - dbi Blog","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/#website"},"datePublished":"2020-05-27T16:00:17+00:00","author":{"@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/c4d05b25843a9bc2ab20415dae6bd2d8"},"breadcrumb":{"@id":"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbi-services.com\/blog\/documentum-upgrade-switch-from-lockbox-to-aek-key\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.dbi-services.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Documentum Upgrade &#8211; Switch from Lockbox to AEK key"}]},{"@type":"WebSite","@id":"https:\/\/www.dbi-services.com\/blog\/#website","url":"https:\/\/www.dbi-services.com\/blog\/","name":"dbi Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/c4d05b25843a9bc2ab20415dae6bd2d8","name":"Morgan Patou","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g","caption":"Morgan Patou"},"description":"Morgan Patou has over 12 years of experience in Enterprise Content Management (ECM) systems, with a strong focus in recent years on platforms such as Alfresco, Documentum, and M-Files. He specializes in the architecture, setup, customization, and maintenance of ECM infrastructures in complex &amp; critical environments. Morgan is well-versed in both engineering and operations aspects, including high availability design, system integration, and lifecycle management. He also has a solid foundation in open-source and proprietary technologies - ranging from Apache, OpenLDAP or Kerberos to enterprise-grade systems like WebLogic. Morgan Patou holds an Engineering Degree in Computer Science from ENSISA (\u00c9cole Nationale Sup\u00e9rieure d'Ing\u00e9nieurs Sud Alsace) in Mulhouse, France. He is Alfresco Content Services Certified Administrator (ACSCA), Alfresco Content Services Certified Engineer (ACSCE) as well as OpenText Documentum Certified Administrator. His industry experience spans the Public Sector, IT Services, Financial Services\/Banking, and the Pharmaceutical industry.","sameAs":["https:\/\/blog.dbi-services.com\/author\/morgan-patou\/","https:\/\/x.com\/MorganPatou"],"url":"https:\/\/www.dbi-services.com\/blog\/author\/morgan-patou\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/14205","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/comments?post=14205"}],"version-history":[{"count":0,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/14205\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media?parent=14205"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/categories?post=14205"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/tags?post=14205"},{"taxonomy":"type","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/type_dbi?post=14205"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}