Change a key or the system passphrase

A file or group key change is another conversion. Export under the old working settings, preserve and check the exports, change the affected settings, and import with Replace. A group-key change requires every affected member to be included, across applications and databases.

A system passphrase change has wider scope:

1. Stop users, jobs, API sessions, and ODBC activity for the entire affected APPX system.
2. Back up the data and administration configuration and preserve the old passphrase and keys.
3. Use the List of FMS Groups and Files using Encryption report on Set/Change Pass Phrase to help inventory the configuration. Check the inventory against actual file and group usage.
4. Export every encrypted datafile in every affected database under the old working configuration. Check all exports before changing the passphrase.
5. Set the new system passphrase and reset the affected file and group keys under it. Retain the exact new values securely.
6. Import every affected file with Replace, then verify integrity, counts, records, and application totals.
7. Make and test a new backup. Keep the old key records for older backups.

Do not perform a partial system passphrase change while leaving other encrypted databases under the old configuration.