ENC Encryption Deprecated

Prev Next

Deprecation Notice

The legacy $ENC encryption implementation has been deprecated and replaced with an enhanced version that utilizes a custom encryption key for each platform server. While the $ENC string notation remains the in place, the underlying encryption mechanism now depends on a server-specific custom encryption key rather than using the previous global encryption key.

With this change, it could introduce differences between environments and affect:

  • Secrets encrypted in previous platform versions
  • Cross-environment data migration (development and stage may use the same adapter service config for an adapter, but due to encryption key differences, encrypted passwords will be different)

What should I do?

If you are upgrading to the Platform 6.0 version or newer, please read Migration of Encrypted Secrets in the Platform 6 upgrade guide beforehand. Since currently encrypted strings using $ENC will not work out-of-the-box after an upgrade to Platform 6, it is important that you know how to migrate and define your encryption keys in the Platform 6 configuration prior to platform start.

Related Reading