Cached windows/linux admin credentials in OME

Question

Hi, I have a quick query with how OME caches the windows/linux credentials it requires for actioning or scheduling updates to servers.  We've had questions raised during a security review of the OME application in our environment as to where the credentials used for updates by the ssh/wmi process on OME (once entered by the administrator) are held by the application and whether they are encrypted, hashed and what algorithm is used to keep them secure. Can someone briefly describe how these are handled within the application and what security precautions have taken place to restrict any exposure of those credentials?

DELL-Abhijit P · Answer

Hi,

Thanks for your post. The credentials are encrypted and stored in the database. The encryption uses a complex combination key and the credentials cannot be transferred to another machine.

The credentials are only used by the task manager service and if another user wants to run the task, they cannot re-use stored credentials. They have to enter the credentials again.

Regards

Abhijit

reestr · Answer

Hi Abhijit, Thank you for the response.  Do you have any information on the encryption algorithm used and how the credentials are protected to prevent them being re-used?

DELL-Rob C · Answer

Hi there,

We're always cautious to post security and credential information about the product on the forum, but if we can get more specific questions you might have, we should be able to answer them via the support queue. Can I ask you to dial in so we can help you more directly? 800-945-3355

Thanks much,

Rob

Dell OpenManage Essentials

Was this post helpful?