Server Configuration > Post Install Server Security > Migrating to Encrypted Server-side Passwords
 
Migrating to Encrypted Server-side Passwords
By default, the Integrity Lifecycle Manager server is installed with passwords configured in plain text. If you want to change the default installation and run with encrypted server-side passwords, you can use the encryptPassword application to modify the target server files for password encryption. The encryptPassword application is located as follows:
installdir/bin/encryptPassword.exe
* 
Before running the encryptPassword application, you must first stop the Integrity Lifecycle Manager server. After you run the application and restart the server, the system then uses encrypted passwords.
If you have configured Federated Server architecture (FSA) for your environment, you can also use the encryptPassword application to migrate to encrypted passwords on the proxy. To migrate to encrypted passwords on the proxy, run encryptPassword from the installdir/bin directory on the proxy machine. For more information on FSA, see “Understanding Federated Server Architecture”.
When the application is run, if the Integrity Lifecycle Manager server is running in the default plain text password configuration, it migrates the server to the encrypted password configuration; if the Integrity Lifecycle Manager server is already running in the encrypted password configuration, it encrypts any target passwords that are in plain text and writes them back to the file in the encrypted format.
To run the application directly and migrate to encrypted passwords, specify encryptPassword with options as follows:
encryptPassword -e|--encryptPassword
or
./encryptPassword -e|--encryptPassword
where
encryptPassword runs the application for password encryption.
-e|--encryptPassword specifies the option to migrate the system on the target Integrity Lifecycle Manager server—whether host or proxy—from plain text passwords to encrypted passwords. If the server is already running in the encrypted password configuration, this option specifies to encrypt any remaining plain text passwords. For example, encryptPassword -e.
For a list of the passwords that are encrypted by the encryptpassword application, see “Encrypting Server-side Passwords”.
To migrate encrypted passwords on the Integrity Lifecycle Manager server