CCS uses pass phrases to generate symmetric key. The Encryption Management Service and the Application Server use these keys in turn to encrypt and decrypt configuration information, including passwords and connection details. The person who installs CCS creates the pass phrases.
You enter the pass phrase when you install the Application Server and the Encryption Management Service. The Encryption Management Service and the Application Server should use unique pass phrases. The pass phrases you choose should be complex passwords. These passwords must be difficult to guess.
You require the pass phrase to perform the following actions:
Change the service user account.
Uninstall from a different user context.
Install an upgraded version.
If the pass phrase is lost, you can use the Configure Service Account tool to reset it. If you reset the pass phrase, you must re-enter all of the credentials that the Application Server and the Encryption Management Service use.