# Property Encryption

**URL:** <https://forums.pega.com/t/property-encryption/8989>\
**Category:** General\
**Tags:** pega-common-application, java-and-activities, other-industry, senior-system-architect\
**Created:** [February 10, 2025, 9:11am UTC](https://forums.pega.com/t/property-encryption/8989 "2025-02-10T09:11:32Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Raguraman.K](https://avatars.discourse-cdn.com/v4/letter/r/8e8cbc/32.png) [@Raguraman.K](https://forums.pega.com/u/Raguraman.K)\
**Post date:** [February 10, 2025, 9:11am UTC](https://forums.pega.com/t/property-encryption/8989/1 "2025-02-10T09:11:32Z")

</div>

Hi All,

I need To encrypt a property value using Pega OOTB function encryptproperty and also used Access control policy method to encrypt a property. But I am getting below error..

| **“encryptPropertyValue: No key store or site-specific cipher algorithm specified”** |
| --- |

Please help me how to specify cipher algorithm to encrypt property in my application.

thanks,

Raguraman.K

---

<div class="post-metadata">

**Author:** ![sathishsenthil](https://avatars.discourse-cdn.com/v4/letter/s/dbc845/32.png) [@sathishsenthil](https://forums.pega.com/u/sathishsenthil)\
**Post date:** [February 10, 2025, 8:55pm UTC](https://forums.pega.com/t/property-encryption/8989/2 "2025-02-10T20:55:11Z")

</div>

@Raguraman.K

The error **“encryptPropertyValue: No key store or site-specific cipher algorithm specified”** occurs because Pega is unable to find a valid **Keystore** or **cipher algorithm** configuration for encryption. Let’s go step by step on how to resolve this.

### **Solution Steps to Configure Encryption in Pega:** ### **1. Ensure a Keystore is Configured**

Pega requires a **Keystore** to securely store encryption keys. Follow these steps:

- **Go to** : `Records > Security > Keystore`
- **Create a new Keystore** (if not already present)
- **Keystore Type** : Choose **Custom Keystore** , **Amazon KMS** , or **Azure Key Vault** based on your setup.
- **Upload or Generate the Encryption Keys**.
- **Save & Test** the Keystore.

💡 **Tip:** If using Pega Platform encryption, ensure the **Platform Cipher** is properly configured.

### **2. Configure a Cipher Algorithm**

Pega allows encryption via a **cipher algorithm** specified in the **prconfig.xml** file or **Dynamic System Settings (DSS)**.

- **Go to:** `Records > SysAdmin > Dynamic System Settings`
- **Add/Update the following DSS values:**
  - **Owning Ruleset:** `Pega-Engine`
  - **Setting Purpose:** `security/cipher/default`
  - **Value:** _(Set an encryption algorithm, e.g., AES/CBC/PKCS5Padding)_

- **Restart the server** to apply the changes.

### **3. Verify Property-Level Encryption via Access Control Policy**

If you are encrypting a property using an **Access Control Policy** , ensure:

- The **Access Control Policy** is correctly configured for **Property Encrypt**.
- The **Keystore** is referenced in the **Access Control Policy Condition**.

🔹 **Steps:**

1. Navigate to `Records > Security > Access Control Policy`
2. Create a policy of type **PropertyEncrypt**.
3. In the **Access Control Policy Condition** , ensure the encryption algorithm and Keystore are specified.

### **4. Use `encryptProperty` Correctly**

Pega provides the **`@encryptProperty(propertyName, className)`** function, but it requires a proper encryption configuration.

✅ **Example Usage in a Data Transform or Activity:**

```auto
@encryptProperty(.SSN, "YourClassName")

```

Ensure that **YourClassName** refers to the class where the property exists.

### **Final Checklist to Fix the Issue**

✔ **Keystore** is configured under `Records > Security > Keystore`.  
✔ **Dynamic System Setting (DSS)** `security/cipher/default` is set with a valid cipher algorithm.  
✔ **Restart the server** after making changes to DSS or Keystore.  
✔ **Access Control Policy of type `PropertyEncrypt`** is set up correctly.  
✔ **Use `@encryptProperty`** only after ensuring all encryption configurations are in place.

### **Conclusion**

Once you configure a Keystore and specify the cipher algorithm correctly, your encryption should work without errors. Try these steps and let me know if you need further troubleshooting!

---

<div class="post-metadata">

**Author:** ![Raguraman.K](https://avatars.discourse-cdn.com/v4/letter/r/8e8cbc/32.png) [@Raguraman.K](https://forums.pega.com/u/Raguraman.K)\
**Post date:** [February 11, 2025, 5:00am UTC](https://forums.pega.com/t/property-encryption/8989/3 "2025-02-11T05:00:36Z")

</div>

@sathishsenthil Thanks for your help.I will try with this approach.