configuration file encryption

Discussion about security topics in WinCC OA!
Search

Post Reply
6 posts • Page 1 of 1
jcbaar
Posts: 25
Joined: Fri Sep 02, 2011 12:20 pm

configuration file encryption

Post by jcbaar »

Hello,

Is there any native support in WinCC OA to encrypt the information the config file?

User avatar
leoknipp
Posts: 2846
Joined: Tue Aug 24, 2010 7:28 pm

Re: configuration file encryption

Post by leoknipp »

No, an encryption of the information in the config file is not possible.

Best Regards
Leopold Knipp
Senior Support Specialist

gschijndel
Posts: 330
Joined: Tue Jan 15, 2019 3:12 pm

Re: configuration file encryption

Post by gschijndel »

For your own managers you can store encrypted values. Is there specific information which you want to have encrypted?

jcbaar
Posts: 25
Joined: Fri Sep 02, 2011 12:20 pm

Re: configuration file encryption

Post by jcbaar »

Gert-Jan,

Sometimes sensitive information has to be stored in the config file. I understand that we can devise a method for encrypting that information for our own managers, drivers and even control scripts (and we do if necessary) but as you are aware we also make use of special managers (Archie & SQLviaDP) which we have no control over but also need sensitive information stored in the config file. I was kind of hoping that a method was available that would also make this possible for managers that are out of our control.

Thanks and with kind regards,
Jan

User avatar
kilianvp
Posts: 422
Joined: Fri Jan 16, 2015 10:29 am

Re: configuration file encryption

Post by kilianvp »

you can use CtrlCrypt and the functions aes256Encrypt/aes256Decrypt and store everything together with a secrect key in a crypted library

gschijndel
Posts: 330
Joined: Tue Jan 15, 2019 3:12 pm

Re: configuration file encryption

Post by gschijndel »

In case you only need to prevent distributing the sensitive information to all DesktopUIs & MobileUIs, you could store this information in a separate config file like 'config.archie' and start this manager with this additional config file '+config config.archie'.

Post Reply
6 posts • Page 1 of 1