Oracle Weblogic Server (MOSC)

MOSC Banner

Decrypt OPSS Credential store Generic Key

edited Jul 3, 2019 5:00AM in Oracle Weblogic Server (MOSC) 2 commentsAnswered

     We are migrating application/users from a WLS domain to a new WLS domain. The application uses OPSS credential Store GenericKey (Java.secret.key, algo- HmacSHA256) to encrypt every user password and store it in DB. There is a custom DB authenticator which authenticates the user credential using this GenericKey.

The users are unable to login with same password in the new environment as the GenericKey is different in this new environment. Upon password reset from the application UI, users will be able to authenticate as the user password is newly encrypted using the new key.

We are trying to avoid this password reset. Tried copying the key from old domain to new domain from em consoles, but no luck as the key is read as string.

Tagged:

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center