Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Reevanshi Reevanshi (ReevanshiR0965)
Sopra Steria Group
Module Lead
Sopra Steria Group
IN
ReevanshiR0965 Member since 2018 7 posts
Sopra Steria Group
Posted: Mar 13, 2020
Last activity: Mar 13, 2020
Posted: 13 Mar 2020 5:20 EDT
Last activity: 13 Mar 2020 9:41 EDT
Closed

Password Encryption in context.xml

We are using Pega V7.2.2 , DataBase password are stored as simple text in context.xml and the requirement is to encrypt it as a security measure .

username=" username" password="password"

We went through various articles in pdn :

https://collaborate.pega.com/question/ecrypting-db-connection-password-contextxml-file

https://community.pega.com/knowledgebase/articles/security/encryption-pega-platform

 

All articles mentioned above .... they have suggested the solution for prconfig.xml . Do you have any additional information or solution to how to encrypt passwords in context.xml ?

To see attachments, please log in.
Pega Platform
Security
Communications and Media
Senior System Architect

Posted: 4 years ago
Posted: 13 Mar 2020 9:41 EDT
Harish Gunneri (Harish_Gunneri)
PEGA
Senior Principal Engineer, Technical Support
Pegasystems Inc.
US

Hi Reevanshi 

 

There are various places where DB username/password is specified in plaintext like prbooststrap & prconfig file to run certain CLI utilities. Please note keyring implementation is to encrypt the password for prconfig.xml, passgen is for prbootstrap.properties. 

Refer to the Password Encryption section here:- https://community.pega.com/knowledgebase/articles/security/encryption-pega-platform

Please note custom cipher implementation encrypts application-level data but not the database connection details in context.xml. If you want to encrypt the password in context.xml then that is a question for the application server. Pega doesn't have any recommendations to achieve this. 

 

Let me know if that clarifies.

To see attachments, please log in.

Related content:

Question

Ecrypting DB connection password in context.xml file

Question Solved

Context.XML file in Community Edition

Question Solved

Change in Tomcat context.xml environment value

Question

Tomcat context.xml file changes, validations to be performed.

Question Solved

I want to use prconfig.xml instead of context.xml and connect to the DB. Also need steps to encrypt database password in prconfig.

Question

I want to use prconfig.xml instead of context.xml for DB connection.

Question

Tomcat context.xml for JMS communication with webMethods (Software AG)

Question

Pega Docker Container image based on tomcat 9 / openjdk 11 is exposing DB password in context.xml

Question

I want to start Pega Platform by entering DB connection information in prconfig.xml instead of context.xml.

Question

Password Decryption which is not encrypted by PEGA

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice