Endpoint configuration password storage and encryption algorithm - Identity Manager

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

Administrators managing Identity Manager or Provisioning Server may need to verify the storage location and encryption methods for sensitive password data within endpoint configurations (such as Oracle, DB2, or MS SQL).

Environment

Identity Manager 14.x

Resolution

Identity Manager secures endpoint configuration passwords using the Advanced Encryption Standard (AES) when FIPS mode is enabled.

• Storage Location: Data is stored within the Provisioning Directory.
  User DN:  eTdsaContainername=DSAs,eTnamespacename=CommonObjects,DC=etadb
  Port: 20391
• Oracle Attribute: For Oracle Server endpoints, the password resides in the eTORADirectoryPWD attribute.
• Example DN: eTORADirectoryName=,eTNamespaceName=Oracle Server,dc=im,DC=etadb

 

Note: Similar attributes are used for DB2 and Microsoft SQL Namespace configurations. For further information on release versions

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.