App Connect

App Connect

Join this online user group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Applicationintegration
#App Connect
#AppConnect
 View Only
  • 1.  Secret Key Management

    Posted Mon December 18, 2023 10:08 AM

    Hello Team,

    We are working on UAT environment and accessing external secured resources with there Secret keys in java project. But value of keys are hard coded in our ESQL-Compute node we want to store all the keys in a centralized location and access them.Can anyone help us on this?



    ------------------------------
    Aniket Ghadge
    ------------------------------


  • 2.  RE: Secret Key Management

    Posted Wed December 27, 2023 01:22 AM

    Hi Aniket, there are multiple ways you can achieve this. Following are some of the options along with their pros and cons:

    1. Database
      1. Pro: Highest flexibility as multiple applications even outside ACE can access these keys.
      2. Con: Adds complexity as DataSource (ODBC or JDBC) needs to be configured.
    2. Java KeyStore File
      1. Pro: Protected through password and standard Java API available for accessing keys from the KeyStore.
      2. Cons: File needs to be physically placed on File-System accessible from the ACE server
    3. User Defined Policy
      1. Pro: Only accessible within ACE through the provided API.
      2. Cons: Keys needs to be (Hex or Base64) encoded and stored in plain text and can be easily accessed and modified.


    ------------------------------
    Irfan Shahzad
    Integration Architect
    ------------------------------



  • 3.  RE: Secret Key Management

    Posted Wed December 27, 2023 11:10 PM

    Hello Irfan Shahzad,

    Thank you for responding. We will analyse and work on any one of your suggested resolution.



    ------------------------------
    Aniket Ghadge
    ------------------------------