Password Encryption

Replication Server encrypts all passwords, and stores and transmits passwords in encrypted format.

Replication Server uses password encryption instead of clear text when storing all passwords for new Replication Server installations.

When you you specify or change passwords with rs_init, create user, alter user, create connection, alter connection, create route, and alter route, Replication Server uses an algorithm to encrypt all passwords in the rs_users and rs_maintusers RSSD system tables, and in the Replication Server configuration file. You cannot decrypt the passwords.

Replication Server uses the rs_password_key row in the rs_encryptionkeys RSSD system table, and the RS_random attribute in the configuration file to support password encryption and decryption. Replication Server automatically generates installation specific random values for the rs_password_key row in the system table and for the RS_random attribute when you start Replication Server and Replication Server does not find the values in the table or the configuration file.

You can regenerate random values for the password encryption key in the system table and configuration file with the alter encryption key password_key_row_name regenerate command. To regenerate the password encryption key in the rs_password_key row of rs_encryptionkeys, enter:

alter encryption key rs_password_key regenerate

Warning! Do not change or delete the RS_random attribute in the configuration file manually as this prevents Replication Server from starting.

Replication Server cannot retrieve the encrypted passwords and cannot start if:

You do not backup and restore the configuration file with the corresponding RSSD or ERSSD.
The RS_random attribute is lost or corrupted

If all users cannot log in because there is no valid RS_random attribute, remove the RS_random attribute in the configuration file if the attribute exists, and reset the sa user password. You can then log in to Replication Server and manually set the passwords for all users and maintenance users.

For upgrade and downgrade considerations, see Replication Server Configuration Guide > Password Encryption.