Why are user name and password in clear text in the system_odbc.ini file, and how can I encrypt them?

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Description:

For security reasons I need to encrypt the user name and password in the system_odbc.ini file.

This is a security violation having a critical privileged account's password stored in a text file.

Solution:

It's not needed to provide user name/password in the system_odbc.ini file. When you save credentials in SiteMinder Management Console, the credentials are encrypted and stored in the sm.registry file.

Environment

Release:
Component: SMPLC