Encrypt password for truststores and keystores in the Java Agent IntroscopeAgent.profile

Products

• DX Application Performance Management
• CA Application Performance Management (APM / Wily / Introscope)

Issue/Introduction

SSL communication between the agent and the Enterprise Manager can be enabled by specifying relevant SSL Communication Properties in the IntroscopeAgent.profile. Listed below are some of the properties where you can specify the keystore, truststore, and their passwords:

• agentManager.trustStore.1
• agentManager.trustStorePassword.1
• agentManager.keyStore.1
• agentManager.keyStorePassword.1

Environment

APM Java Agent 10.x

Resolution

While there is no option in the IntroscopeAgent.profile to enable encryption for the password properties (like how it can be done on the EM side by setting properties introscope.enterprisemanager.trustpassword.channel2.plaintextpassword=true), we do perform password decryption checking on these passwords in the code.

In this case, you can workaround the need by manually encrypting the password using the PropertiesUtil.jar in the <Agent_home>\tools directory, then specify the encrypted value in the agent profile.

For example, below are the steps involved:

1. Encrypt the password with PropertiesUtil.jar:

C:\Program Files\Java\jre7\bin>java -jar "<agent_home>\tools\PropertiesUtil.jar" encrypt password
<encrypted_value>

2. Specify the encrypted value in the following properties of the IntroscopeAgent.profile:

agentManager.trustStorePassword.1=<encrypted_value>
agentManager.keystorePassword.1=<encrypted_value>

Note: The PropertiesUtil.jar can be obtained from the StandAloneAgentInstaller

Additional Information

SSL Communication Properties