SAP Knowledge Base Article - Preview

3480995 - SAP CPQ call to regenerate JWT Token Signing Keys

Symptom

From the 2405 SAP CPQ release onwards, the generation of JWT Token Signing Keys within the Trusted Applications administration is now 128 characters long, and the Secret field on the Credential Management page (for records of type Secret) now requires at least 32 characters.

This is being done to ensure that the length of the JWT secret satisfies the minimum security requirements, which will be necessary for a security patch that is planned to be deployed in the near future.

The security patch will update the library that generates JWT tokens and will require secrets to be at least 32 characters long.


Read more...

Environment

SAP SALES CLOUD CPQ

Product

SAP CPQ all versions

Keywords

JWT Token Signing Key, regenerate, Trusted Applications, integrations, 2511 release, 2405 release , KBA , CEC-SAL-CPQ , Sales Cloud CPQ , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.