Question
Pega Platform 8.3
How can I encrypt apache tomcat context.xml file JDBC database user password
I saw very old articles discussing about it. But none of the really talk about apache tomcat 9.0.xx version and pega platform 8.x context.xml file
currently passwords are stored in plain text format.
***Edited by Moderator Marissa to update Content Type from Discussion to Question***
Pegasystems Inc.
US
Please check if below pdn link helps.
https://collaborate.pega.com/question/ecrypting-db-connection-password-contextxml-file
Pegasystems Inc.
IN
Hi,
You can generate encrypted passwords for use in the prconfig.xml/context.xml file using a JCE keyring file generated with an algorithm supplied by a site-specific cipher.
Follow the below article to create the custom cipher using Pega platform:
Thanks
Pegasystems Inc.
US
Hi,
There are various places where DB username/password is specified in plaintext like prbooststrap & prconfig file to run certain CLI utilities. Please note keyring implementation is to encrypt the password for prconfig.xml, passgen is for prbootstrap.properties.
Refer to the Password Encryption section here:- https://community.pega.com/knowledgebase/articles/security/encryption-pega-platform
Please note custom cipher implementation encrypts application-level data but not the database connection details in context.xml.
If you want to encrypt the password in context.xml then that is a question for the application server. Pega doesn't have any recommendations to achieve this.
Let me know if that clarifies.