Security Recommendations

Change the default ADMIN password

Make sure you do not use the default ADMIN password.

The RSA public/private keys are used to sign and validate DPE tokens.

They are located in the DPE Webapplication folder:

We recommend to create (and reuse) your own, customer-specific RSA public/private key pair.

This can be done by calling CreateRsaKeys.exe in the DpeWebApplication subfolder CreateRsaKeys

CODE

CreateRsaKeys.exe, e.g. start CreateRsaKeys.exe as administrator

After creating the keys copy them to the DpeWebApplication folder and (re-)use them also when updating DPE the next time.