Re-encryption occurs during the repository bootstrap. For bootstrap re-encryption, follow the steps below: Stop the Alfresco Content Services server. Set the following property in the alfresco-global.properties file. encryption.bootstrap.reencrypt=true Backup the current keystore to backup-keystore as shown below: mv keystore backup-keystore mv keystore-passwords.properties backup-keystore-passwords.properties Copy your new keystore over the old keystore. Update keystore-passwords.properties with the passwords you used to create the keystore. In other words, update the keystore.password property with the keystore password and the metadata.password property with the metadata key password. Restart the server.