Deprecation Notice
The legacy $ENC
encryption implementation has been deprecated and replaced with an enhanced version that utilizes a custom encryption key for each platform server. While the $ENC
string notation remains the in place, the underlying encryption mechanism now depends on a server-specific custom encryption key rather than using the previous global encryption key.
With this change, it could introduce differences between environments and affect:
- Secrets encrypted in previous platform versions
- Cross-environment data migration (development and stage may use the same adapter service config for an adapter, but due to encryption key differences, encrypted passwords will be different)
What should I do?
If you are upgrading to the Platform 6.0 version or newer, please read Migration of Encrypted Secrets in the Platform 6 upgrade guide beforehand. Since currently encrypted strings using $ENC
will not work out-of-the-box after an upgrade to Platform 6, it is important that you know how to migrate and define your encryption keys in the Platform 6 configuration prior to platform start.