OpenWGA 7.0 - Updating to OpenWGA 7.0

With version 6.3 OpenWGA introduced the usage of a new key for symmetric encryption based on the AES scheme. It is stored in a file "openwga.key" in the OpenWGA configuration folder. OpenWGA uses it to encrypt many request-based information that should be protected from user modification, like portet states, URL var params etc.

If you run OpenWGA in a cluster it is necessary that all cluster nodes use the same symmetric encryption key. But upon updating your cluster nodes every server will generate its own key. So you should do the following when updating:

• After updating the first OpenWGA cluster node take its file "openwga.key" from the WGA configuration folder and copy it to the configuration folders of all other cluster nodes. As OpenWGA 6.0 did not yet use such a file it is currently ignored.
• Update the other cluster nodes. They will pick up your copied "openwga.key" so all nodes will use the same encryption