topic Studio Context password encryption in Talend Studio

Studio Context password encryption

n999 — Sat, 16 Nov 2024 05:12:18 GMT

Hello

A quick question - but I can't seem to find a post that answers this.

We are on 6.4.1:

If you add a context variable that is a type of password it can't be read in plain text as it is asterix'ed out. Also the context .item files show an encrypted value.

I as wondering what key is used by Talend to decrypt these values at runtime?

And is this key checked into version control (ie in the same project) along with any encrypted values?

I know there are alternatives to storing passwords in a project/job context but I was interested in how Talend does this out of the box?

Cheers

Re: Studio Context password encryption

Anonymous — Mon, 19 Aug 2019 04:00:12 GMT

Hello,

Passwords in Talend Jobs and Context Variables are encrypted using a two way symmetrical approach. The code is in Talend Routines to encrypt and decrypt the password.

In context variables, we can leave password field blank, and design our jobs to load the password from a DB table or a properties file, which are not stored in Git. The logic in Talend job can be implemented explicitly or implicitly through the project projects for jobs.

Let us know if it helps.

Best regards

Sabrina

Re: Studio Context password encryption

n999 — Tue, 24 Sep 2019 12:06:33 GMT

Hi Thanks for that.

"The code is in Talend Routines to encrypt and decrypt the password. "

So if passwords are added directly to context variables, does this mean that if another user imports my jobs and contexts, they can

1) run my jobs with correct passwords

2) decrypt these passwords if they were able to extract the decryption algorithm and key?

Thanks

Re: Studio Context password encryption

Anonymous — Wed, 25 Sep 2019 12:55:41 GMT

Essentially, yes.