Encrypting Authentication Passwords
|
|
Beginning at Windchill 10.2, PTC has changed the location of the wvs.properties file. The file has been moved from the $WT_HOME/codebase directory to the $WT_HOME/codebase/WEB-INF/conf directory. Be sure to make any necessary changes to your code to reflect this location change.
|
To encrypt the passwords stored in WVS authentication files, enter the following script from a Windchill shell:
ant -f <Windchill>/bin/adminTools/sip/EncryptPasswords.xml
encryptWVSWorkerAgent
where <Windchill> is the Windchill installation directory.
This script encrypts any plain-text passwords it finds in all WVS authentication files, including those identified in the useworkerdownload and edrload.livecycle.authfile properties that are in the wvs.properties file. After you encrypt the passwords in the authentication files, the passwords are replaced with the following:
encrypted.<auth_keyword>.<auth_properties_file_path>
where:
• <auth_keyword> is the keyword at the beginning of the authentication line for the password that is encrypted.
• <auth_properties_file_path> is the full file path of the PROPERTIES file containing the password on Windows platforms and a path starting with the Windchill installation bin directory on UNIX platforms.
The following lines show an example authentication file that is located on a Windows system at D:\ptc\Windchill\auth.properties before encryption:
auth=user1:pw123abc
auth.RemoteSiteA.PROE=user2:pw789xyz
After running the encryption script from a Windows system, the encrypted passwords include the file path with required escape characters (formatted to page width):
auth=user1:encrypted.D:\\ptc\\Windchill\\auth.properties
auth.RemoteSiteA.PROE=user2:encrypted.auth.RemoteSiteA.PROE. D:\\ptc\\Windchill\\auth.properties
The following lines show an example authentication file that is located on a UNIX system at /opt/ptc/Windchill/auth.properties before encryption:
auth=user1:pw123abc
auth.RemoteSiteA.PROE=user2:pw789xyz
After running the encryption script from a UNIX system, the encrypted passwords include a file path starting with the Windchill installation bin directory (formatted to page width):
auth=user1:encrypted.auth./opt/ptc/Windchill/bin/../auth.properties
auth.RemoteSiteA.PROE=user2:encrypted.auth.RemoteSiteA.PROE. /opt/ptc/Windchill/bin/../auth.properties
Although the password information in the file is not the actual password, it uniquely identifies the password to the encryption software being used and, therefore, any changes made to the information can cause the password to no longer be valid.
|
|
Do not change encrypted password information unless you are changing the actual password.
|
