Previous Topic: LOGONBY FacilityNext Topic: Installing the Rules Facility


Password Encryption Facility

To provide extra security for your system, use the Password Encryption Facility (PEF). PEF is an optional feature that allows your site to encrypt logon and link passwords and maintain them in an encrypted form in the CP object directory and in the CA VM:Secure directory database. All passwords are automatically encrypted when a site uses PEF. When a user issues a command that requires password checking, CA VM:Secure encrypts the password that is entered before it is compared with the password stored in the directory. PEF is available only to sites running the Rules Facility, and the Rules Facility must be configured before installing PEF.

PEF provides three methods of encryption:

Forward encrypted and triple DES encrypted passwords cannot be decrypted. Reversible encrypted passwords can be decrypted through the removal procedure.

CA VM:Secure does not support a directory with some passwords encrypted and other passwords in clear text.

Note: For information about installing and using PEF, see Password Encryption Facility.