Best Practice to Store Encryption Key Passphrases and Passwords in OneStream

[Avijit_Saha]

Hi,

Are there any suggestions regarding best practices to store encryption key passphrases and SFTP passwords in OneStream, for usage by integrations ? How should those be stored ? We are using cloud version of OneStream.

BR,

Avijit

[JackLacava]

For things executed inside the platform (Extenders etc), you can use BRApi.Utilities.EncryptText and .DecryptText to manage crypted values. Where you'd want to store them is left to you; a pretty clean way could be to have your own custom "Secrets" table.

For anything else, you'll have to talk to Support to discuss possible options.

[SteveK]

 BRApi.Utilities.EncryptText isn't encryption though - it's a BASE64 encode......

[SteveK]

Looks like  BRApi.Utilities.EncryptText() has now been updated to something more secure than BASE64! in the last 3 weeks!