How User Credentials Are Protected in the Database

Products

• Carbon Black App Control

Issue/Introduction

The question may come up if the user passwords are encrypted or hashed in the database

Environment

• App Control Server: All Supported Versions

Resolution

• The user passwords are protected by being hashed in the database so they can not be retrieved by someone with SQL access
• Active Directory user passwords don't even exist in database as that is retrieved from AD