Upgrading After Rotating the Key Encryption Key - Encrypted Alpha Keywords - English - Foundation 22.1 - OnBase - Essential - Premier - Standard - external - Standard - Essential

CAUTION:

Do not upgrade the database until you have completed the steps below. Later in this process, you need to access the database using the old Configuration executable. If you upgrade the database, you can no longer log into the database using the old Configuration executable.

Upgrading OnBase is not part of the Key Encryption Key (KEK) rotation process. However, when you rotate the KEK used by OnBase, you are required to take additional steps when it is time to upgrade your OnBase solution. This is because the KEK piece stored in your upgraded version of the OnBase executables and DLLs does not match the piece stored in your OnBase database. Your upgraded OnBase solution will not function until you change the KEK piece stored in the upgraded OnBase executables and DLLs to match the piece stored in your OnBase database.

To rotate the KEK in the upgraded executables and DLLs:

Create a new folder and copy the old version of the OnBase Configuration executable into the folder. For example, your new folder may have a file path such as C:\Program Files\Hyland\ConfigOld.

Note:
You only need to perform this step on the workstation that will be used to rotate the KEK. After the KEK is rotated, the new files can be copied to other user workstations, as long as those workstations are using the same version of OnBase.
Install the new version of OnBase on all of the workstations, including the workstation that will be used to rotate the KEK in the upgraded executables.

CAUTION:
Do not upgrade the database until you have completed the steps below. Later in this process, you need to access the database using the old Configuration executable. If you upgrade the database, you can no longer log into the database using the old Configuration executable.
Log on to the Configuration module using the old OnBase Configuration executable.
Perform the steps in Rotating the Key Encryption Key, ensuring that you:
- Rotate the upgraded OnBase Client and Configuration executables, as well as the upgraded Hyland.Core.GrabIcon.dll, dmcore.dll, and OBCorePlatMgmt.dll, if necessary.
- Change the HSI, HSICORE, and HSINET database passwords if you previously changed them (see step Rotating the Key Encryption Key under Key Encryption Key Rotation).
- You use the same KEK that you previously used in step Rotating the Key Encryption Key, generate a new KEK, or enter a new KEK.
Perform the steps in Deploying the Rotated Key Encryption Key, making sure you replace the executables and DLLs on your workstation with the new executables and DLLs. You can then deploy the KEK to any number of workstations, as long as those workstations have upgraded to the same version of OnBase.