Copyright © Cloud Software Group, Inc. All Rights Reserved

Obfuscate Utility

The obfuscate utility allows you to encrypt confidential information such as passwords in property files using an encryption key. The obfuscate utility rewrites a Java property file by encrypting property values that start with a #!! or #! prefix. It supports three types of encryption keys. They are as follows:

•

A custom encryption key. The encryption key is derived from a password provided by you. To use it, add the prefix #!! to the data you want to encrypt and use -password or -passwordFile command line parameters as appropriate. The password can contain any keyboard characters and has no length limit. If encrypting sensitive date in the deployment configuration file using your custom password, you need to provide the same password when using -passwordFile (See , Working with Passwords in TIBCO Runtime Agent Scripting Deployment User’s Guide).

•

A machine key. To use a machine key, add the prefix #!! to the data you want to encrypt and do not use -password or -passwordFile.It can be used to encrypt a custom key in a properties file. Then you can use -passwordFile to encrypt data using the encrypted key in the properties file. If using a machine key, the data cannot be decrypted on another machine.

•

A fixed key. To use a fixed key, add the prefix #! to the data you want to encrypt. The fixed key is compatible with earlier versions of TIBCO Runtime Agent but should not be treated as secure. A machine key or custom encryption key should be used whenever possible (See , Working with Passwords in TIBCO Runtime Agent Scripting Deployment User’s Guide).

Ownership is with customers to remember passwords in clear text. There is no utility provided by TIBCO to decrypt passwords encrypted using Obfuscate Utility.

The obfuscate utility supports the following flags:

•	-password (to prompt you to type in a password)

•	-passwordFile (to read an encrypted password from a given file)

Example

To use -password, follow these steps:

1.	In the property file, add the prefix #!! to the data you want to encrypt. For example:

Repo.serverCredential = #!!mysecret

2.	Invoke the utility from the command line.

TIBCO_HOME/tra/version/bin/obfuscate.exe -password property_file_name

3.	Type in a password on the command line. For example:

Please type in encryption password* ****

To use -passwordFile, you need to specify the path to the file that contains an encrypted password. That password is encrypted by a machine key. To do this, follow these steps:

1.	Encrypt the password in a properties file using a machine key.

a.	Add the prefix #!! to the custom password you want to encrypt in a property file. For example:

Only.one.key = #!!passwords-can_be-long-and-have-signs()@#$%^-etc.123

You can use only one custom key for password encryption at a time.

b.	Invoke the utility from the command line.

TIBCO_HOME/tra/version/bin/obfuscate.exe Encrypted_password_property_file_name

2.	Use -passwordFile to encrypt the data using the encrypted password in the property file from step 1.

a.	In the property file, add the prefix #!! to the data you want to encrypt. For example:

Repo.serverCredential = #!!mysecret

b.	Invoke the utility from the command line.

TIBCO_HOME/tra/version/bin/obfuscate.exe property_file_name -passwordFile Encrypted_password_property_file_name

Copyright © Cloud Software Group, Inc. All Rights Reserved