Encrypt a password file for use by daemons

Teamcenter stores passwords in local files using advanced encryption standard (AES) 256-bit encryption. These encrypted passwords are used by Teamcenter utilities, services (daemons) that access the Teamcenter database, and Teamcenter installation tools (Deployment Center and TEM). During installation, you can specify the path to the directory that contains the password files. The installation tool locks access to the password directory to all users except the operating system user performing the installation. To create an encrypted password file, use the install utility with the -encryptpwf argument. You can change the encryption key used to encode the password by creating a CryptKey file in the TC_DATA directory and providing the key in the file. If this CryptKey file exists and contains a valid key (32 bytes or more), this key is used instead of the key from the database. Note Changing the encryption key is not required and not a common practice. Caution The password must not be empty nor contain any whitespace characters such as space, tab, newline, carriage return, form feed, or vertical tab. In addition, the password must not contain any of the following characters: ! @ $ % = & ' " : ; . < > ( ) { } You can change the directory where password files are stored using your preferred installation tool: Deployment Center TEM In the Corporate Server component properties, click Show all parameters , and then enter the directory in the Administrative Password Directory box. Launch TEM in maintenance mode and select Update Security in the Feature Maintenance panel. Proceed to the Password Security panel and enter the directory in the Administrative Password Directory box. Changing the stored password does not change the Teamcenter database password. This must be done separately in the Teamcenter client interface. Caution For security reasons, access to the password directory must not be changed unless other methods of ensuring access control are in place.