SQL Authentication Password In shepherd.dsn Is Visible As Text

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

When using SQL Authentication (instead of Windows Authentication) to connect to the database from the App Control Server, the password appears in plain-text and is not hashed, obfuscated, etc.

Environment

• App Control Server: All Supported Versions
• Microsoft SQL Server: All Supported Versions
• Microsoft Windows Server: All Supported Versions

Cause

It is well-known that plain-text passwords exist in DSN files for accessing SQL when you use SQL Authentication. 

Resolution

Carbon Black strongly encourages using a specific Domain account for installing and logging in to the App Control Server, and for database access, to simplify control of both database and Active Directory permissions.

Additional Information

• Changing the Password or Username for the App Control Service Account and IIS Identity
• Update the Password for the SQL Local User Account