Is the password set up in a configuration file that is created on the application/broker server when the software is installed and initially connects to the database?
Yes.
svrenc - encryption utility is used to encrypt DB schema password. Whenever this utility is re-run the encrypted password file is re-generated.