Updating encryption algorithm for sensitive properties

You must update the encryption algorithm for sensitive properties in the flow.xml.gz file.

Starting with Cloudera Flow Management 2.1.5, the default algorithm for encrypting the sensitive properties in the flow.xml.gz file changed to NIFI_PBKDF2_AES_GCM_256 to provide greater security.

To update the flow.xml.gz file with this new algorithm, execute the following command:

/opt/cloudera/parcels/CFM-2.1.5.0-215/TOOLKIT/bin/encrypt-config.sh -n <nifi.properties from original NiFi> 
-f <flow.xml.gz from original NiFi> -x -s <sensitive props key from new NiFi> -b <bootstrap.conf from original NiFi> -A NIFI_PBKDF2_AES_GCM_256 
-g <new flow.xml.gz filename>

When you made all the necessary edits, you can deploy the new flow.xml.gz file across the NiFi nodes.