DSXchange

This is more of an DevOps/Admin question.

Background
We use parameter sets to store the DB credentials for stages. We'll make a Value File for our dev/test/prod. We use a password vault application called CyberArk. CyberArk has the ability on a schedule to automatically log into our databases and change passwords. Very handy for the dept. to keep in compliance with the annual password change policy.

Question
I would like to extend the automated password change functionality into the parameter set value files. Does anyone know of a way to do this programmatically?

What I know so far
On the engine I found where these value files are stored: And I can see that they're human readable.

Before I started hacking away at command line code to parse these files to change the password, I wanted to see if there was already an IBM solution for this?

I have found IBM documentation on how to encrypt a new value if I do have to do this on my own:
https://www.ibm.com/support/knowledgece ... nning.html

typically passwords and such are put into env variables which can be encrypted and hidden and pulled into a param set from there.

You can set env variables with a routine, I think. I have not had to do this, but I am 99% sure you can do it somehow.

I think you can also set them with a unix script via istool or something (not sure exactly, I am not our admin and only have a tangential understanding of what is possible). You could easily automate that. If not unix, you can still do this with batch file or unix emulation suite etc.

No out of the box IBM solution yet...hack away...the file as you noted is a simple file, and any changes made to the value file will be populated to the Parameter Set automatically