Setting up password encryption on WebSphere Application Server

If required, you can set up password encryption on WebSphere Application Server (WAS).Use the Cipher Tool in NexJ Studio to generate the password file, copy it to the WAS machine, and then enable encryption on the server.

Before you can set up password encryption, use the NexJ Studio Cipher Tool to generate the master password file master.pwd. If you do not have access to NexJ Studio, someone else might need to generate the file for you.

If you are not doing this task on the NexJ Studio host machine, you need to ensure that the init.jacl file has been copied from the NEXJ_PLUGIN\enterprise\etc\config\websphere\ directory to a directory on the WAS host machine.

Before you can set up password encryption on WAS, ensure that WAS is running.

To set up password encryption on WAS:
  1. Get the master password file master.pwd, which was generated using the NexJ Studio Cipher Tool.
  2. Copy this file to the WebSphere Application Server machine in the WAS_ROOT\nexj directory.
  3. Set file permissions to make the master.pwd file readable only to the server process user (that is, the login account specified in the application server service) and the deployment administrator.
  4. On the WAS host machine or the NexJ Studio host machine, start the wsadmin tool.
    Issue the following command:
    WAS_ROOT\bin\wsadmin -host adminHost -port
          adminPort -username adminUser -password
          adminPassword
  5. Update the initialization script to enable encryption.
    Tip: For explanation of the parameters, review the initialization script.

    Issue the following commands:

    source path\init.jacl
enableEncryption true 
saveConfig
exit

    In this command, path is the absolute path to the init.jacl file.

Password encryption is now enabled for your WebSphere Application Server.

Restart WAS for the changes to take effect.