HCL Workload Automation, Version 9.4

Encrypting user passwords for response files

Steps that need to be taken to encrypt the user passwords for the response files.

About this task

You must encrypt each password string stored in the response files by using Installation Manager.

You can perform the password encryption by using one of the following procedures:
Installation Manager String encryption utility interface
To encrypt the password string for the response files, perform the following steps:
  1. Go to the eclipse directory of the Installation Manager installation directory. The default eclipse directory is:
    Windows operating systems
    C:\Program Files\IBM\Installation Manager\eclipse
    UNIX and Linux operating systems
    If you are installing as the root user

    /opt/IBM/InstallationManager/eclipse/tools

    If you are installing as a non-root user

    /home/<non-root-user>/IBM/InstallationManager/eclipse/tools

  2. To open the String encryption utility interface, run the following command:
    Windows operating systems
    IBMIM.exe encryptString <stringToEncrypt>

    where <stringToEncrypt> is the value to be encrypted.

    UNIX and Linux operating systems
    ./IBMIM encryptString <stringToEncrypt>

    where <stringToEncrypt> is the value to be encrypted.

  3. In the String encryption utility window, note the Encrypted version of the String field value related to the String to be encrypt field value.
  4. Copy the Encrypted version of the String value in the password entry of the response file.
Installation Manager command line tool
To encrypt the password string for the response files, perform the following steps:
  1. Go to the eclipse directory of the Installation Manager installation directory. The default eclipse directory is:
    Windows operating systems
    C:\Program Files\IBM\Installation Manager\eclipse
    UNIX and Linux operating systems
    If you are installing as the root user

    /opt/IBM/InstallationManager/eclipse/tools

    If you are installing as a non-root user

    /home/<non-root-user>/IBM/InstallationManager/eclipse/tools

  2. Run the following command:
    Windows operating systems
    IBMIM.exe -silent -noSplash encryptString <stringToEncrypt> >
    <Encryptedpwd>.txt

    where <stringToEncrypt> is the value to be encrypted and the <Encryptedpwd>.txt is the file where there is the encrypted value of the password.

    UNIX and Linux operating systems
    ./IBMIM -silent -noSplash encryptString <stringToEncrypt> > 
    <Encryptedpwd>

    where <stringToEncrypt> is the value that is encrypted and the <Encryptedpwd> is the file where there is the encrypted value of the password.

  3. Open the file <Encryptedpwd> and copy the value contained into the file in the data key of the response file.
  4. Remove the file <Encryptedpwd>.

Example

This example shows you how to write the section USER INFORMATION of the IWS94_FRESH_MDM_WIN.xml response file, setting the HCL Workload Automation user value to twsuser and the user password value to passw0rd on Windows operating systems.

By using the Installation Manager command line tool, encrypt the password passw0rd saving the encrypted value to the file my_pwd.txt:
IBMIM.exe -silent -noSplash encryptString passw0rd > my_pwd.txt

The file my_pwd.txt contains the following value:

rbN1IaMAWYYtQxLf6KdNyA==
Complete the USER INFORMATION section of the IWS94_FRESH_MDM_WIN.xml response file as follows:
<!--USER INFORMATION
Supply the HCL Workload Scheduler credentials information --> 
<data key='user.userName,com.ibm.tws' value='twsuser'/>
<data key='user.password,com.ibm.tws' value='rbN1IaMAWYYtQxLf6KdNyA=='/>
Note: For security reasons, remove the file my_pwd.txt after using it.