---
title: "Encrypting and Passphrase Protecting the Configuration File"
slug: "encrypting-and-passphrase-protecting-the-configuration-file-1-1"
tags: ["7.12", "Edge Filer", "Gateway", "Filer"]
updated: 2026-03-08T13:29:25Z
published: 2026-03-08T13:29:25Z
canonical: "kb.ctera.com/encrypting-and-passphrase-protecting-the-configuration-file-1-1"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.ctera.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Encrypting and Passphrase Protecting the Configuration File

You can encrypt and passphrase protect the edge filer configuration file.

1. In the **Configuration** view, select **System > Configuration Tools** in the navigation pane.  

The **Configuration Tools** page is displayed.  

![Image](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-NSS2X2T5.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A29%3A29Z&se=2026-11-11T05%3A29%3A29Z&sr=c&sp=r&sig=gYeAEVZH4bumGDvqgb7YI0XzcGa8r9eDn10tPRvB7dM%3D)
2. Click **Encrypt**.  

The **Configuration Tools > Settings** page is displayed.  

![Image](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-JSGG4H94.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A29%3A29Z&se=2026-11-11T05%3A29%3A29Z&sr=c&sp=r&sig=gYeAEVZH4bumGDvqgb7YI0XzcGa8r9eDn10tPRvB7dM%3D)
3. Slide **Enable Encryption on Sensitive Fields** on.  

![Image](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-MG4TRSAL.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A29%3A29Z&se=2026-11-11T05%3A29%3A29Z&sr=c&sp=r&sig=gYeAEVZH4bumGDvqgb7YI0XzcGa8r9eDn10tPRvB7dM%3D)
4. Enter a passphrase to protect the configuration file and click **Save**.
5. Click **Confirm** to reboot the edge filer so that the passphrase is activated.

The sensitive fields in the configuration file, `db.xml`, such as the server certificate value, are encrypted.

When attempting to import an encrypted file to the edge filer, the passphrase is required.

**Note**

After the configuration file has been encrypted, you can only revert to it not being encrypted by resetting the edge filer to its defaults.