Obfuscating the Credential Store Password
Using Password Based Encryption
For example, the password can be masked using Password Based Encryption (PBE) with the Elytron tool. Open a Command Prompt on the machine hosting the Xpress Insight Server and enter this command, wherex.y.z
represents the Wildfly version, subversion, and patch numbers:
Windows
<INSIGHT_HOME>/server/wildfly-x.y.z/bin/elytron-tool.bat mask --salt 12345678 --iteration 200 --secret store-password
Linux
<INSIGHT_HOME>/server/wildfly-x.y.z/bin/elytron-tool.sh mask --salt 12345678 --iteration 200 --secret store-password
Then amend the credential store password in
standalone.xml
file:
<credential-store name="store-name" ...>
<!-- Replace this: <credential-reference clear-text="store-password"/>
With: -->
<credential-reference clear-text="[MASK-abc;12345678;200]"/>
</credential-store>
© 2001-2024 Fair Isaac Corporation. All rights reserved. This documentation is the property of Fair Isaac Corporation (“FICO”). Receipt or possession of this documentation does not convey rights to disclose, reproduce, make derivative works, use, or allow others to use it except solely for internal evaluation purposes to determine whether to purchase a license to the software described in this documentation, or as otherwise set forth in a written software license agreement between you and FICO (or a FICO affiliate). Use of this documentation and the software described in it must conform strictly to the foregoing permitted uses, and no other use is permitted.