---
title: "Encrypting and Passphrase Protecting the Configuration File"
slug: "encrypting-and-passphrase-protecting-the-configuration-file-1"
tags: ["7.11", "Edge Filer", "Gateway", "Filer"]
updated: 2025-11-02T15:20:30Z
published: 2025-11-02T15:20:30Z
canonical: "kb.ctera.com/encrypting-and-passphrase-protecting-the-configuration-file-1"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.ctera.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Encrypting and Passphrase Protecting the Configuration File

You can encrypt and passphrase protect the edge filer configuration file.

1. In the **Configuration** view, select **System > Configuration Tools** in the navigation pane.  

The **Configuration Tools** page is displayed.  

![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-9OVII9N3.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A21%3A28Z&se=2026-11-11T05%3A21%3A28Z&sr=c&sp=r&sig=h80NxsDEZtsFqI3enSrO4wAmu19KFxjnvmzKZSZYFMU%3D)
2. Click **Encrypt**.  

The **Configuration Tools > Settings** page is displayed.  

![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-6WZP9RF9.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A21%3A28Z&se=2026-11-11T05%3A21%3A28Z&sr=c&sp=r&sig=h80NxsDEZtsFqI3enSrO4wAmu19KFxjnvmzKZSZYFMU%3D)
3. Slide **Enable Encryption on Sensitive Fields** on.  

![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-F8XU1ITD.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A21%3A28Z&se=2026-11-11T05%3A21%3A28Z&sr=c&sp=r&sig=h80NxsDEZtsFqI3enSrO4wAmu19KFxjnvmzKZSZYFMU%3D)
4. Enter a passphrase to protect the configuration file and click **Save**.
5. Click **Confirm** to reboot the edge filer so that the passphrase is activated.

The sensitive fields in the configuration file, db.xml, such as the server certificate value, are encrypted.

When attempting to import an encrypted file to the edge filer, the passphrase is required.

          **Note**

          

After the configuration file has been encrypted, you can only revert to it not being encrypted by resetting the edge filer to its defaults.