CA EEM Release Notes › New Features › New Safex Options

New Safex Options

From this release, the CA EEM Server stores global user passwords in a SHA1 encoded digest format in the internal user store. Global users with MD5 encoded passwords are not supported. To create and use SHA1 encoded digests, the following options are added to Safex.

-sha1encodeddigest

Converts a cleartext password to a SHA1 encoded digest.

DirectoryPasswordDigest

Specifies the global user password in a SHA1 encoded digest format. This tag is added to the Safex XML.

Use these options when you are managing global users through Safex. For example, when you are adding a global user to the internal data store, do the following:

1. Use Safex to convert a cleartext password to a SHA1 encoded digest.

   safex.exe -sha1encodeddigest <password>
   

2. Specify the encoded digest from Step 1 in the Safex XML using the DirectoryDigestPassword tag.

   <GlobalUser>
   <UserName>securityguard</UserName> 
   <DirectoryPasswordDigest>encodeddigestfromStep1</DirectoryPasswordDigest> 
   <Description>Security Guard</Description> 
   <JobTitle>Lieutenant</JobTitle> 
   <FirstName>Security</FirstName> 
   <LastName>Guard</LastName> 
   <DisplayName>Security Guard</DisplayName> 
   </GlobalUser>
   

Note: For more information about this new option, see the Safex Command Line Reference chapter and Global User Examples in the Programming Guide.