You are here: Introduction > Intel AMT and Security Considerations > File Encryption

# File Encryption

The Configuration Utility uses XML files for the host-based configuration method. These files can contain passwords and other information about your network. To protect this data, each profile created or edited by the Configuration Utility is encrypted (with a password that you supply).

The XML profiles are encrypted using this format:

- Encryption algorithm: AES128 using SHA-256 on the provided password to create the key
- Encryption mode: CBC
- Initialize Vector (IV) is the first 16 bytes of the Hash

Some advanced options of Intel SCS use additional XML files (for example, the dedicated network settings file). If you want to use these optional XML files, it is highly recommended to encrypt them. The encryption must be done using the same format used by Intel SCS. To do this, you can use the SCSEncryption.exe utility located in the Utils folder.

For example:

- To encrypt an XML file named NetworkSettings.xml:

  SCSEncryption.exe Encrypt c:\NetworkSettings.xml P@ssw0rd

- To decrypt an XML file named NetworkSettings.xml:

  SCSEncryption.exe Decrypt c:\NetworkSettings.xml P@ssw0rd

For more information, refer to the CLI help of the SCSEncryption.exe utility.

Note:
When encrypting additional XML files, you must use the same password that was used to encrypt the exported profile.