Job Server encrypted columns not decrypting

Question

Originally replied here https://www.quest.com/community/products/one-identity/f/identity-manager/5640/decrypt-data/55986#55986 
 but probably better to put this in a new post: 
 1IM version 7.0.2 
 Hi, I need the password stored in DPRSystemVariable table (column Value). I turned on encryption for DPRSystemVariable.Value in Designer, and then ran Crypto Configuration. When I look at the value in object browser I now see it encrypted. 
 So, I created a script that is executed in a process step, the step has a parameter (encrypted checked), the contents of the script is just outputting the value of that parameter to a file with VID_Write2Log, it outputs: 
 [E]W0NdQUZxeFJJNXVYdXkzd3o3Z3JMbnVsYXJFemFrSm90ZkY4ZDdmQ0c0bDk4QStNQllqVzRIZ25hVkxBcUpYM1hWMVl1blFkUzVITExzMkhpTVdJUS9wa1BPTXc2aWp4bkJsdGF4U1JrdUdoRWdMOGhVSDZJN0tCK2o1NU1SSDZXbjdzQlNDYldnMEVLbGExcnJoVGxGaWZzRkhhTzNuZUhFSkhHZ3BnUzFwQjF3VFtDXQ==[E] 
 which is the exact value stored in the database . 
 Can you provide hint as to why the process step is not decrypting?

Barry Jackson · Answer

Hi, 
 DPRSystemVariable objects are not encrypted the same way as the columns marked for encryption in the database. 
 A column that is marked for encryption can 'only' be decrypted by the job server service(s) that have access to the encryption key. 
 If you have an issecret valule stored in DPRSystemVariable you can use this code to decrypt it: 
 Script to decrypt a variable in a sync project e.g. password 
 Public Function CCC_Decrypt_DPRSystemVariable(ByVal EncryptedString As String, ByVal ReturnEncrypted As Boolean) As String 
 Dim ReturnString As String Dim decrypter As VI.Projector.Security.DatabaseEncryption = New VI.Projector.Security.DatabaseEncryption(Connection.Session) 
 ' decryption using the Projector method ReturnString = decrypter.Decrypt(EncryptedString) 
 ' encryption using the object layer method - this value can be decrypted by the Jobserver If ReturnEncrypted Then ReturnString = Connection.Encryption.Encrypt(ReturnString) End If 
 Return ReturnString 
 End Function 
 HTH, Barry.

Endpoint Privilege Management

Job Server encrypted columns not decrypting

Top Replies