I'm also stuck here. In "JasperReports Server Administrator Guide" page No.173 & 174 (Static Key Encryption). It says. "Before setting encryption.dynamic.key=false to use static encryption, you must also configure the secure file called keystore where the key pair is kept. Be sure to customize the keystore parameters listed in the following table to make your keystore file unique and secure." http://community.jaspersoft.com/documentation/jasperreports-server-ultimate-guide/v55/encrypting-passwords-urls