Question
US Bancorp
US
Last activity: 7 Aug 2023 10:33 EDT
prbootstrap.properties password encryption
We have encrypted password for prbootstrap.properties file and it generated the password. prbootstrap.properties file details with encrypted password: bix.db2.username=PRPC bix.db2.password=1054abacqbcrt3oalci62ef5fcfd6a06b6 Question: What is the algorithm is used to define the encrypting this password? Our Enterprise compliance team mentioned that even though we have encrypted the password, it is still in alphanumeric. So they wanted to know if this is safe or not and easily decrypted. So would like to know what is the algorithm and which cypers are used to encrypt this password using the com.pega.pegarules.pub.PassGen class?
Pegasystems Inc.
IN
By default, Pega use the DESede (Triple-DES) algorithm with a 168-bit key. Refer below post for more information:
JP Morgan
US
@KrishnaKKalimisetty you can try vault or Kerberos to get rid of this issue.
most of the organizations are getting rid of storing encrypted password on property files. better implementation is fetching it from vault or going token based