Db2

Db2

Where DBAs and data experts come together to stop operating and start innovating. Connect, share, and shape the AI era with us.


#Data


#Data
#Databases
#Operatingsystems
#Db2
#Databasesolutions
 View Only

  • 1.  Encrypted Keystore Password Issue

    Posted 02/03/20 07:32 AM
    Hi,

    We want to need the webconsole with https connection. To do that, I followed the instructions in:
    https://www.ibm.com/support/knowledgecenter/SS5Q8A_3.1.x/com.ibm.datatools.dsweb.ots.security.doc/topics/https_cert.html

    If I use a cleartext password in the seccion "wlp.keystore.password=" it works fine.
    But if I used the result of the function <dmchome>\dsutil\bin\crypt.bat the webconsole is no longer accessible.

    Product Name: IBM Db2 Data Management Console
    Build: 20200121-103505
    Version: 3.1.1.0

    OS: Windows Server 2019 Standard

    Is there a description of the solution?

    ------------------------------
    Regards, Dennis
    ------------------------------

    #Db2


  • 2.  RE: Encrypted Keystore Password Issue

    Posted 02/05/20 09:55 PM
    Hi Dennis,
    We got your question, and our development team will investigate and update with you ASAP. Thanks.

    ------------------------------
    Li Hui Yan (Autumn Yan)
    From DMC Team
    ------------------------------



  • 3.  RE: Encrypted Keystore Password Issue

    Posted 02/07/20 12:44 AM
    Edited by System Admin 01/20/23 04:40 PM
    Hi Dennis,
    Reply from dev team:
    In general, keystore password is managed by liberty, so it's not suggested to use crypt.sh/crypt.bat to encrypt.

    The work around should be.

    1. Find the value of property wlp.password.encryption.key in the bootstrap.properties file.
    <install path>/wlp/usr/servers/dsweb/bootstrap.properties
    1. Encrypt the password with Liberty utility bat file.
    <install path>/wlp/bin/securityUtility.bat encode --encoding=aes --key=<encryption key from step 1> <the clear password>
    Please feel free to let us know if you have any more problem.


    ------------------------------
    Li Hui Yan (Autumn Yan)
    From DMC Team
    ------------------------------

    Original Message


  • 4.  RE: Encrypted Keystore Password Issue

    Posted 02/07/20 07:21 AM
    Hi Li Hui Yan,

    The bat file <install path>/wlp/bin/securityUtility.bat does not work. I have set the variables WLP_INSTALL_DIR and JAVA_CMD_QUOTED hardcoded.
    After these adjustments I get a result. Similar to the following: {aes}xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx==
    The https page cannot be accessed with this value. The http page still works.
    Returned back to plain text password the https page works again.

    ------------------------------
    Regards, Dennis
    ------------------------------

    Original Message


  • 5.  RE: Encrypted Keystore Password Issue
    Best Answer

    Posted 02/11/20 04:11 AM
    Edited by System Admin 01/20/23 04:34 PM

    Hi Dennis,
    1. If the value of wlp.password.encryption.key ends with one or two '=' characters, they sometimes may be escaped. Please remove the backward slash before the equal mark. For example, please use encryption key like this. (In this case, the clear password is 'password'.)

    securityUtility.bat encode --encoding=aes --key=WTI201707121717ifhIuc6pWYWZRYg6CWX0*uDzRviJ8tTiTB+fvnNUBZcHG2nzGxmAdW4+W-ayoju-QeHaFLI-Ui7FR1TFvk2OpRSLxjRuIW85a8uJhyTE3zkVcL9VsHk+-0Hbtn6a5FB8d0DKb9c*ptYNAFOlZ7gkAeymI04BOuidNpV5seMXijPk6j*4vN3cVER4u45wNvwA15oQlxZz9XXb2i+Fadc40CnHFhaXxX5O1v+djXdQ8bhYxpzrQNUOMeNAGL+PXo9xKO1USegzGK3U7NGCP14y1zZD9E5emGdjTg7ew7NXKFTzHE0738y592*LUVtyPLSpmdIvhmHf4wJpLNvCBqmlFvfRVqKBZIYD3qej3SNcxtu0ke*nXUojG9Ta97lEuz3T5KiCy6Pncm-G2ZeQ8U+gAZe7SmbOkH6A+p9yYKz0MBFLoHJPE01izLTMHwO-BB8igZdMPIxXy9E1vyu0PIUxIjh8696z5D13kGDu7+OPWMmQbe*6s8nX== password

    2. Please do not add any white space characters before or behind the value of wlp.keystore.password. Here is an example.
    wlp.keystore.password={aes}APSMLvb1pffAnPyW/ZaTHPKgP/+pAZFztejiZSyxlgke


    ------------------------------
    Li Hui Yan (Autumn Yan)
    From DMC Team
    ------------------------------

    Original Message


  • 6.  RE: Encrypted Keystore Password Issue

    Posted 02/11/20 08:20 AM
    Hi Li Hui Yan,

    Now the encrypted password works. Removing the backward slash to execute the script is the solution.

    Thanks a lot,

    ------------------------------
    Regards, Dennis
    ------------------------------

    Original Message


  • 7.  RE: Encrypted Keystore Password Issue

    Posted 02/11/20 10:47 PM

    Hi Dennis,

    Happy to see your problem resolved. Feel free to let us know if you need more support in future using of DMC. Thanks.



    ------------------------------
    Li Hui Yan (Autumn Yan)
    From DMC Team
    ------------------------------

    Original Message


Related Content