HPE recommends that you encrypt all passwords that you enter into a configuration file.
A key file is required to use AES encryption.
At the command line, type:
autpassword -x -tAES -oKeyFile=./MyKeyFile.ky
A new key file is created with the name MyKeyFile.ky
Caution: To keep your passwords secure, you must protect the key file. Set the permissions on the key file so that only authorized users and processes can read it. HPE Web Connector must be able to read the key file to decrypt passwords, so do not move or rename it.
The following procedure describes how to encrypt a password.
At the command line, type:
autpassword -e -tEncryptionType [-oKeyFile] [-cFILE -sSECTION -pPARAMETER] PasswordString
where:
Option | Description |
---|---|
-tEncryptionType
|
The type of encryption to use:
For example: Note: AES is more secure than basic encryption. |
-oKeyFile
|
AES encryption requires a key file. This option specifies the path and file name of a key file. The key file must contain 64 hexadecimal characters. For example: |
-cFILE -sSECTION -pPARAMETER
|
(Optional) You can use these options to write the password directly into a configuration file. You must specify all three options.
For example:
|
PasswordString
|
The password to encrypt. |
For example:
autpassword -e -tBASIC MyPassword
autpassword -e -tAES -oKeyFile=./key.ky MyPassword
autpassword -e -tAES -oKeyFile=./key.ky -c./Config.cfg -sDefault -pPassword MyPassword
The password is returned, or written to the configuration file.
The following procedure describes how to decrypt a password.
At the command line, type:
autpassword -d -tEncryptionType [-oKeyFile] PasswordString
where:
Option | Description |
---|---|
-tEncryptionType
|
The type of encryption:
For example: |
-oKeyFile
|
AES encryption and decryption requires a key file. This option specifies the path and file name of the key file used to decrypt the password. For example: |
PasswordString
|
The password to decrypt. |
For example:
autpassword -d -tBASIC 9t3M3t7awt/J8A
autpassword -d -tAES -oKeyFile=./key.ky 9t3M3t7awt/J8A
The password is returned in plain text.
|