🤔 Description
To ensure a higher level of credential security that may be required in specific industries, ACLI 11.0 introduces the Secure Properties functionality.
...
The ACLI Shell can also create Secure Properties entries as part of its guided site configuration functionality, which can be launched using the slash-command, /sites add
.
Working with Secure Properties
The Secure Properties adds a further security check by consulting the Secure Properties key store for the Secure Properties key variable. This check is only performed when the variable reference contains the prefix secret
.
To distinguish the Secure Properties key from all other variables, the Secure Property keys are prefixed with secret
.
As a user, you can define when the variable is looked up in the key store by setting the environment variable to ACLI_SECURE_PROPERTIES_SAFE_MODE=false
, the key store is always checked.
Using Secure Properties consists in three main steps:
...
When you create the key store file (named .acli.keystore
), it can be found in your home directory.
Each ACLI user on a given system has their own such file. Note that on a multi-user system, each user is required to maintain their own ACLI installation.
The key store file path can be overridden to point to an alternative location through the use of the environment variable ACLI_SECURE_PROPERTIES
. This can be useful if you need to work with multiple key stores or multiple installations of ACLI, but typically should not be needed.
To create a key store, run the action setSecureProperty
, as shown in the example:
...