Securing credentials and parameter values in dsjob commands

You can encrypt data and store the encrypted values in files to use in dsjob commands. To enter credentials in the command line, you can alternatively use credential prompting to hide your password in the command window.

You can use encrypted credentials and encrypted parameter file values in your dsjob commands so that you can avoid typing clear data on the screen when you run commands in the command line. See the Encrypt command documentation in the IBM® InfoSphere® Information Server Administration Guide for information about this command.

Encrypt your information by running the encrypt command, and copy and save the encrypted values in a file:
- If you are encrypting credentials, create the credentials file (*.txt) and securely store the file. See the topic on the credentials file for restrictions and sample contents for the credentials file.
- If you are encrypting job parameter values, store the encrypted values in the appropriate job parameters file by copying the encrypted output and pasting the value in the job parameter file. For example:
```
job_parameter_name=encrypted_job_parameter_value
```
  You can create aliases for the job parameter values. You cannot encrypt job parameter names.
Save the file.
Run the dsjob command.
You can enter your credentials securely by using one of these methods:
- Using the credentials file. If you are running a dsjob command that requires your user credentials, run your command with the -authfile parameter and specify the full path of the credentials file that you want to use. A sample syntax for using the -authfile parameter in a dsjob command that uses a parameters file with encrypted data is as follows:
```
dsjob -authfile c:\cred_file.txt 
	-run -paramfile c:\paramfile.txt dstage1 testJob
```
- Credentials prompting. If you want to specify your credential data through the command line, specify only the -url or the -domain parameter, and the -server parameter. You are prompted for the user name and password. (The password is hidden in the command window.) If you include the -url or the-domain parameter, and the -server and -user parameters in your command, then you are prompted for the password. Here is a sample command and interaction:
```
C:\IBM\InformationServer\Clients\Classic>dsjob 
-domain [2002:920:c000:217:9:32:217:32]:9443 -server RemoteServer
-ljobs newTest
Please type user name:admin
Please type password:
Job_ODBC
Job_UDT5
Job_UDT6
Job_Universe
PXJob_DC
Sequence_ODBC
Sequence_UDT5
Sequence_UDT6
Sequence_Universe

Status code = 0
```
  Note: The password is hidden in the command window.