Encrypt a Clear Text Password

Implementation Guide › Changing CA ControlMinder Service Account Settings › Password Change Procedures › Encrypt a Clear Text Password

Encrypt a Clear Text Password

You encrypt clear text passwords for the following service accounts:

RDBMS_service_user
reportserver

You encrypt the passwords because they are stored in clear text XML files in the JBoss directory. You use the pwdtools utility to encrypt clear text passwords.

To avoid accidentally selecting carriage breaks in the encrypted password, we recommend that you direct the encrypted password (the output of the utility) to a text file. Otherwise, carriage breaks may occur if the encrypted password wraps over more than one line.

When you use pwdtools to encrypt a clear text password, you must enclose the password in double quotes.

To encrypt clear text passwords

Open a command prompt window.
Navigate to the following directory, where ACServerInstallDir is the directory in which you installed CA ControlMinder Enterprise Management:
```
ACServerInstallDir/IAM Suite/Access Control/tools/PasswordTool
```
Run the following command:
```
pwdtools -FIPS -p "password" -k [filename]
```
password

Specifies the clear text password.

filename

Specifies the name of the file to which pwdtools outputs the encrypted password.

pwdtools encrypts the password.

Example: Encrypt a Clear Text Password

This command encrypts a clear text password and directs the encrypted password to the file pw.txt. The clear text password is "secret" and must be enclosed in double quotes:

C:\Program Files\CA\AccessControlServer\IAM Suite\Access Control\tools\PasswordTool>
pwdtools.bat -FIPS -p "secret" -key C:\jboss-4.2.3.GA\server\default\deploy\IdentityMinder.ear\config\com\netegrity\config\keys\FIPSkey.dat"

More information:

Change the reportserver Password

Change the RDBMS_service_user Password