DataSealer dependencies

[Paul B. Henson]

I wasn't planning on using client-side storage, so I didn't think I needed the DataSealer keys and commented them out of the configuration and the properties file. After that, the idp failed to initialize and I determined that there were a number of configuration files that reference the DataSealer implementation. Is it a hard dependency to have the DataSealer key/password configured and the files present even if you are not using client-side storage? Is it used for anything else; in particular, if you are not using the client-side storage implementation, is it still a security requirement to regularly rotate the DataSealer key?

Thanks...

--
Paul B. Henson  |  (909) 979-6361  |  http://www.cpp.edu/~henson/
Operating Systems and Network Analyst  |  henson at cpp.edu
California State Polytechnic University  |  Pomona CA 91768