Tripwire files are signed or encrypted using
site or local keys. These keys are protected by passphrases. When
selecting passphrases, the following recommendations apply: Use at least
eight alphanumeric and symbolic characters for each passphrase. The
maximum length of a passphrase is 1023 characters. Quotes should not be
used as passphrase characters.
Assign a unique passphrase for the site key. The site key passphrase
protects the site key, which is used to sign
Tripwire software configuration and policy
files. Assign a unique passphrase for the local key. The local key signs
Tripwire database files. The local key may sign
the Tripwire report files also.
Store the passphrases in a secure location. There is no way to remove
encryption from a signed file if you forget your passphrase. If you forget
the passphrases, the files are unusable. In that case you must
reinitialize the baseline database.
Download
