[Java programming language only]

Storing security artifacts in WebSphere Application Server

Protect secure passwords to prevent access from unauthorized users in WebSphere® Application Server deployments.

About this task

Passwords and the authenticationSecret in the server properties and client properties files must be encoded.

Procedure

Invoke the PropFilePasswordEncoder to encode passwords and the authentication secret.
Run the following commands was_root/bin/PropFilePasswordEncoder.sh command, or on Windows, run the was_root\bin\PropFilePasswordEncoder.bat command; for example:
./PropFilePasswordEncoder <properties_file> <property_to_encode>

Properties that should be encoded include the keyStorePassword, trustStorePassword, credentialGeneratorProps, and authenticationSecret. Even when these properties are encoded, it is possible to recover the original values. The file system on which the properties files, key stores, and trust stores are kept must be protected, so only authorized users can access them.

See the WebSphere Application Server documentation for more information.

What to do next

Starting secure servers in WebSphere Application Server