configuration file encryption

Discussion about security topics in WinCC OA!
Search

Post Reply
6 posts • Page 1 of 1
jcbaar
Posts: 8
Joined: Fri Sep 02, 2011 10:20 am

configuration file encryption

Post by jcbaar » Thu Aug 15, 2019 9:06 am

Hello,

Is there any native support in WinCC OA to encrypt the information the config file?

User avatar
leoknipp
Posts: 2031
Joined: Tue Aug 24, 2010 5:28 pm

Re: configuration file encryption

Post by leoknipp » Fri Aug 16, 2019 6:32 am

No, an encryption of the information in the config file is not possible.

Best Regards
Leopold Knipp
Senior Support Specialist

gschijndel
Posts: 104
Joined: Tue Jan 15, 2019 2:12 pm

Re: configuration file encryption

Post by gschijndel » Fri Aug 16, 2019 10:40 am

For your own managers you can store encrypted values. Is there specific information which you want to have encrypted?

jcbaar
Posts: 8
Joined: Fri Sep 02, 2011 10:20 am

Re: configuration file encryption

Post by jcbaar » Fri Aug 16, 2019 3:39 pm

Gert-Jan,

Sometimes sensitive information has to be stored in the config file. I understand that we can devise a method for encrypting that information for our own managers, drivers and even control scripts (and we do if necessary) but as you are aware we also make use of special managers (Archie & SQLviaDP) which we have no control over but also need sensitive information stored in the config file. I was kind of hoping that a method was available that would also make this possible for managers that are out of our control.

Thanks and with kind regards,
Jan

User avatar
kilianvp
Posts: 200
Joined: Fri Jan 16, 2015 9:29 am

Re: configuration file encryption

Post by kilianvp » Sun Aug 18, 2019 4:04 pm

you can use CtrlCrypt and the functions aes256Encrypt/aes256Decrypt and store everything together with a secrect key in a crypted library

gschijndel
Posts: 104
Joined: Tue Jan 15, 2019 2:12 pm

Re: configuration file encryption

Post by gschijndel » Mon Aug 19, 2019 8:59 am

In case you only need to prevent distributing the sensitive information to all DesktopUIs & MobileUIs, you could store this information in a separate config file like 'config.archie' and start this manager with this additional config file '+config config.archie'.

Post Reply
6 posts • Page 1 of 1