When EnterWorks is installed, all microservices are encrypted. It is possible to
configure a microservice to run unencrypted, but it is not recommended. A
microservice can be configured to run encrypted or unencrypted, independently of
whether other microservices are encrypted or unencrypted. If a microservice is
configured to use encrypted mode, all the encryptable settings in the service's
create-service
script must be encrypted. If it is using
unencrypted mode, all encryptable settings must be unencrypted.
Microservices use EnterWorks encryption
- Use File Explorer to move to:
<drive>:\Enterworks\enable2020\services\bin\
- Run the following command in Windows command prompt:
Include the double quotes. Do not include the < > symbols.enable2020-security.exe enc "<enter-string-here>"
For example, if your system user login name is:
TheBestAdminLoginName
to encrypt the system user login name, you would run the command:
enable2020-security.exe enc "TheBestAdminLoginName"
Configure a microservice to be encrypted or unencrypted
To encrypt a microservice:
- Move to:
<drive>:\Enterworks\enable2020\services\install
- Open the
create-script
for the desired microservice in an editor. - If you are encrypting the microservice, set:
or if you are unencrypting the microservice, set:-encryptedMode=true
-encryptedMode=false
- Search the
create-script
for any of the following settings. If you are encrypting the microservice, use EnterWorks encryption to encrypt the values of all the settings below. If you are unencrypting the microservice, use the unencrypted values. Not all of the settings in the table below appear in allcreate-scripts
.Setting Encrypt this string as one string -rabbitServer=<rabbit-user-name>:<rabbit-user-password>:<rabbit-host> <rabbit-user-name>:<rabbit-user-password>:<rabbit-host>
-dbConn=\"server=<hostname>;user id=<username>;password=<unencrypted-EPIM-password>;port=1433;database=<database-name>;encrypt=disable\" server=<hostname>;user id=<username>;password=<unencrypted-EPIM-password>;port=1433;database=<database-name>;encrypt=disable -systemLogin=<system-user-login-name> <system-user-login-name> -systemPassword=<system-user-login-password> <system-user-login-password> -awsAccessKeyId=<aws-access-key-id> <aws-access-key-id> -awsAccessKey=<aws-access-key> <aws-access-key> -azBlobAccessKey=<azure-blob-access-key> <azure-blob-access-key> -epxGid=<epxGid> <epxGid> -infolinkApiKey=<infolinkApiKey>
<infolinkApiKey> - Use the create-service script.