Encryption of sensitive strings

RWS strongly recommends that when you configure settings, you enter any sensitive strings, such as passwords, in encrypted form. You can obtain the encrypted form of a sensitive string by using a tool provided with the product.

The encryption tool comes in the form of two JAR files:
  • udp-core-BUILD.jar
  • udp-common-util-BUILD.jar

where BUILD is the JAR file's build number.

For convenience, you can copy the files from the installation media folder Content Delivery\roles\api\rest\java\lib\ to a target machine and folder of your choice, provided that you have Java installed on the target machine.

To use the tool, enter one of the following commands:
Windows operating systems
java -cp udp-core-BUILD.jar;udp-common-util-BUILD.jar com.tridion.crypto.Encrypt INPUT 
Unix operating systems
java -cp udp-core-BUILD.jar:udp-common-util-BUILD.jar com.tridion.crypto.Encrypt INPUT 

where INPUT is the unencrypted string. (You may wish to redirect output to a file for easy copy-pasting of the tool's response.)

The tool returns the following kind of response:
Configuration value = encrypted:9FUJ9CP81Oj63VhnJxcqx//pW3fP4bekeupIexctzcs=

In this example, the encrypted string to use is encrypted:9FUJ9CP81Oj63VhnJxcqx//pW3fP4bekeupIexctzcs=