Securing External Service Credentials - Latest

Spectrum Spatial Guide

Product type
Software
Portfolio
Locate
Product family
Spectrumâ„¢ software
Product
Spectrumâ„¢ software > Spatial > Spectrum Spatial
Version
Latest
ft:locale
en-US
Product name
Spectrum Technology Platform
ft:title
Spectrum Spatial Guide
Copyright
2025
First publish date
2007
ft:lastEdition
2025-03-07
ft:lastPublication
2025-03-07T10:28:48.112000
Changes in this topic Description
Introduced in version 24.1 Encrypt credentials used to access External Services e.g. databases, WMS, WMTS, Geocoding and Routing Services.

When you create a database based Named Connection or configurations for external services via Spatial Manager, the corresponding metadata like URL, user name and password is stored in Spectrum Spatial Repository. By default, this information is stored as plain-text. The Spatial Repository browsing via WebDAV is disabled by default. To enhance the security further, you have the option to securely store and encrypt the corresponding named resources in repository. This is applicable for following resources:

  • Named Connections
  • Geocoding configurations
  • Routing configurations
  • External WMS configurations
  • External WMTS configurations
Note: The encryption is not enabled by default.
To enable the encryption, follow these steps:
  1. Open a web browser and go to http://server:port/managementconsole
  2. Log in using the admin account.
  3. From Resources, click Spatial.
  4. Expand the Process Arguments section.
  5. Append this property:
    -Dspatial.encryption.service=com.pb.spectrum.spatial.component.utils.NamedConnectionEncryptionService
  6. Click on Save.

Once enabled, new connections will be encrypted. The previous connections and configurations will remain unencrypted unless saved again after enabling encryption. Connections added after disabling the encryption will be stored unencrypted.