Application Perf Mgmt (BAC / BSM) Practitioners Forum
Showing results for 
Search instead for 
Do you mean 

Scripting VUGen with improved password security - Password Encoder is not a sufficient solution

Occasional Advisor

Scripting VUGen with improved password security - Password Encoder is not a sufficient solution

Hi to all developpers!

 

I got a Security alert from our security officer. Our passwords, even if they are crypted, any advanced user can decode it using lr_decrypt function or Passowrd Encoder tool.


We had to find another solution to improve password security storage in our script. I'm thinking on a codage using a private key to decode the password. The problem is to implement the dectyptage on the BPM.

 

Have anybody implemented a better and secure solution ?

 

Thanks you for any help, any suggestion or the solution.

 

Georges

1 REPLY
Highlighted
HPE Expert

Re: Scripting VUGen with improved password security - Password Encoder is not a sufficient solution

I dont think it is possible.