topic Re: Rotate Qlik Replicate Endpoint Passwords in Integration, Extension & APIs

Rotate Qlik Replicate Endpoint Passwords

jarredacurtis — Thu, 15 Jul 2021 15:26:22 GMT

Is there an API or CLI command for changing Relipcate Endpoint passwords? Our organization requires password rotations and we are setting up many endpoints. Having to manually touch every endpoint in the GUI to update the passwords would be painful. Ideally there would be some type of command line utility we could script to update the endpoints when the passwords are rotated in the databases.

Re: Rotate Qlik Replicate Endpoint Passwords

PabloV — Fri, 01 Jul 2022 17:50:51 GMT

Hi Jarred, by any chance were you able to figure out a solution to this problem? I'm currently facing the scenario where we need to rotate the passwords for some replicate endpoints. Any info will be appreciated, thanks!

Re: Rotate Qlik Replicate Endpoint Passwords

jarredacurtis — Thu, 07 Jul 2022 14:11:48 GMT

>From what I understand they have finally implemented an API for this in the latest software release. We are currently planning to upgrade and test the API in the next few months.

Re: Rotate Qlik Replicate Endpoint Passwords

PabloV — Thu, 07 Jul 2022 14:19:10 GMT

Do you mean the API where you export a JSON file for a task and then update the "authenticator" section in your endpoint with a new password, then re-import that JSON and restart the server so the new password takes effect?
That's what I'm testing right now... Via API, or through SSM requests (AWS).
Please let me know if you are referring to a different API, that's all I could find. Thanks.

Re: Rotate Qlik Replicate Endpoint Passwords

SushilKumar — Tue, 14 Nov 2023 06:34:45 GMT

Hello Team,

Password for Endpoint are stored in encrypted form and seems whenever, any task is exported its does not have Passwords for participating endpoints. And Encryption algorithm is not exposed to anyone.

So it could be a reason that it may not be changed by import of the task.

hope this helps.

Regards,

Sushil Kumar

Re: Rotate Qlik Replicate Endpoint Passwords

krishnakarthiks — Fri, 23 Feb 2024 17:09:39 GMT

Hi Team,

Do we have any solution from Qlik Replicate or Enterprise Manager API to rotate the replicate endpoints connections passwords.

We have a similar requirement to rotate GCS endpoint passwords.

Regards

Karthik

Re: Rotate Qlik Replicate Endpoint Passwords

PabloV — Fri, 23 Feb 2024 17:28:50 GMT

Hi,
I was able to rotate passwords using AEM API (formally known as Attunity Enterprise Manager), I believe it is the same as the one you are referring to.

With API Requests you can:
Get list of servers
Get endpoints by service account
Patch endpoints by server

Look for the endpoint patching api in the documentation. The code would look something like this:

patch = [{"op":"replace","path":"/db_settings/password","value":'Newpassword'}]
encoded_payload = json.dumps(patch).encode('utf-8')
PathEndpointURL = "https://"+baseUrl+"/servers/"+'servername'+"/endpoints/"+'endpointName'
headers_content_length=str(len(encoded_payload))
att_response = http.request('PATCH', PathEndpointURL, body=encoded_payload, headers={"%s" % AEMString : "%s" % AEMToken,"HEADERS_CONTENT_TYPE":"application/json; charset=utf-8","HEADERS_CONTENT_LENGTH":"%s" % headers_content_length})

You can validate the changes took place by retrieving the passwords again.

Re: Rotate Qlik Replicate Endpoint Passwords

krishnakarthiks — Fri, 23 Feb 2024 18:54:19 GMT

Thank you @PabloV ; I was going through this topic in help documentation. The requirement is more on GCS and S3 endpoints. These end points has json credentials and secrets, so I'll have to figure out if Patch endpoint can be leveraged for GCS and S3 endpoints.