pbencode reads a file and encrypts it using the encryption key that is specified on the command line or in the settings file. The encrypted result is displayed on the standard output.


pbencode should be used only on files that are backed up. There is no way to decrypt a file after it has been encrypted.

  • Version 3.5 and earlier: long command options not supported.
  • Version 4.0 and later: long command options supported.
pbencode [options]
   -f, -–file=file_name
   -E, --encryptiontype=policy|report|settings
pbencode –v | --version
pbencode –h | --help

-f, --file=file_name

The input file to encode. The default is the policy configuration file.





The encryption type to use, based on the definition set in the settings file.
-v, --version Optional. Print the pbencode version and exit.
-h, --help Optional. Display the pbencode help message and exit.

The files used may appear on the command line.

pbencode -f /opt/pbul/policies/pb.conf -E policy > /etc/pb.conf.enc

Encodes the policy file with the encryption type and key that is specified in the settings file and places the result in /etc/pb.conf.enc.

For more information, please see pbkey.