Encrypting password in the configuration (*.conf) files

Products

• VMware Smart Assurance

Issue/Introduction

How to encrypt the Watch4net|M&R password in the SMARTS and SMARTS-Health configuration (*.conf) files.

Environment

Watch4Net|M&R - 7.x

Resolution

Watch4net provides a tool with APG to encrypt passwords called crypt-password.

To encrypt the password in the conf files for SMARTS and SMARTS-Health, do the following:

1.    Generate the secure password with the crypt-password tool (APG_HOME/bin/crypt-password.sh <password>)

2.    Look in /opt/APG/APG-Backend/conf/collecting.xml  for the <collectors> block. There, look for the <collector> with SmCollectorDiscovery or SmDiscovery in the <classname> block.

      A. SmCollectorDiscovery

          If you are using the Smarts AutoDiscovery, the file to modify will be/opt/APG/APG-Backend/conf/sm-discovery.xml:

 <authentication>
    <broker>##.##.##.##:426</broker>
    <domains refresh-period="240">
       <default-username>admin</default-username>
       <default-password>{Encrypted password generated using APG crypt-password tool}</default-password>
    </domains> </authentication> 

       

     B. SmDiscovery

            In the case of specific domains configured, each domains will have its own configuration file. The filename is included in the block <config-file>:

       <collector enabled="true" name="INCHARGE-AM-PM2" next="Cache">
          <classname>com.watch4net.apg.v2.collector.plugins.SmCollector</classname>
           <config-file>conf/smarts-INCHARGE-AM-PM2.xml</config-file>
           </collector> 

          Replace the password in each SMARTS domain's configuration file:

     <?xml version="1.0" encoding="UTF-8"?>
     <!DOCTYPE config SYSTEM "smarts.dtd">
     <config>
         <domain>INCHARGE-AM-PM2</domain>
         <broker>broked_host:426</broker>
         <username>admin</username>
         <password>{Encrypted password generated using APG crypt-password tool}</password>
         <group>group</group>
         <period>240</period>
         <thread pool-size="3" />
         <dm-connection pool-size="2" keep-connection="false" creation-grace-time="100" />
         <indicators select="both">conf/pm.xml</indicators>
         <properties refresh="00:00/86400" send-on-refresh-only="false" />
         <smooth-factor>0.5</smooth-factor>
     </config>  

 

     C. SMARTS-Health

         If you are using a per domain configuration and you need the SMARTS Health metrics, apply the same change to the SMARTS Health configuration file. The default name is smarts-pm-health.xml:

      <collector enabled="true" name="INCHARGE-AM-PM2-Health" next="Cache">
          <classname>com.watch4net.apg.v2.collector.plugins.SmCollector</classname>
           <config-file>conf/smarts-pm-health-2.xml</config-file>
          </collector> 

        Replace the password in each SMARTS-Health domain's configuration file:

   <?xml version="1.0" encoding="UTF-8"?>
    <!DOCTYPE config SYSTEM "smarts.dtd">
      <config>
             <domain>INCHARGE-AM-PM2</domain>
             <broker>broked_host:426</broker>
             <username>admin</username>
                 <password>{Encrypted password generated using APG crypt-password tool}</password>
                 <group>group</group>
                 <period>240</period>
                 <thread pool-size="3" />
                 <dm-connection pool-size="2" keep-connection="false" creation-grace-time="100" />
                 <indicators select="both">conf/pm-health.xml</indicators>
                 <properties refresh="00:00/86400" send-on-refresh-only="false" />
                 <smooth-factor>0.5</smooth-factor>
         </config>    

3. Restart respective collector-managers.