Bookshelf v10.1.3.2: Adding Publisher Administrator Credentials to Oracle BI Presentation Services Credential Store

Oracle BI Presentation Services must be able to identify the Publisher administrator and obtain the credentials to successfully authenticate in BI Publisher. The Presentation Services server stores the credentials that it uses in a Presentation Services Credential Store file. The Publisher administrator credentials must be added to the credential store. These credentials are stored under an alias called bipublisheradmin. To obtain the Publisher administrator credentials, Presentation Services searches the credential store for a username-password credential with an alias of bipublisheradmin.

For more information on the Presentation Services Credential Store, refer to the Oracle Business Intelligence Enterprise Edition Deployment Guide.

Use the following procedure to add the Publisher administrator credentials to the Presentation Services Credential Store with an alias of bipublisherdmin. This procedure adds the Publisher administrator credentials to the Presentation Services proprietary XML file credential store called credentialstore.xml. The default location of this file is in the following location:

Table 21. Publisher Administrator Credentialstore Parameters
Parameter or Prompt	Value or Input	Description
Credential Alias	bipublisheradmin	Specify the value bipublisheradmin. Presentation Services searches for this alias in order to identify the username-password credential for Publisher administrator.
Username	Administrator	Username of the Publisher administrator. The initial default is Administrator. For information on the Publisher administrator, see Configuring BI Publisher for XMLP Server
Password	Administrator	Password of the Publisher administrator. The initial default is Administrator.
Do you want to encrypt the password?	y or n	Y encrypt the above password.
Passphrase for encryption	<passphrase>	Provide a passphrase to be used to encrypt the password. For example, secret.
Do you want to write the passphrase to the xml?	y or n	Y writes the passphrase that is needed to decode the password in the xml file. For enhanced security, use N. The passphrase is not written to the xml file. Instead, specify the passphrase in the instanceconfig.xml file.

cryptotools credstore -add -infile OracleBIData_HOME/web/config/credentialstore.xml
>Credential Alias: bipublisheradmin
>Username: Administrator
>Password: Administrator
>Do you want to encrypt the password? y/n (y):
>Passphrase for encryption: secret
>Do you want to write the passphrase to the xml? y/n (n):
>File "OracleBIData_HOME/web/config/credentialstore.xml" exists. Do you want to overwrite it? y/n (y):

The CryptoTools utility updates the credentialstore.xml file. This file is located in the directory

After executing the CryptoTools utility with inputs as specified above, the credentialstore.xml file contains entries similar to the following example:

<sawcs:credential type="usernamePassword" alias="bipublisheradmin">
   <sawcs:username>Administrator</sawcs:username>
   <sawcs:password passphrase="secret">
<xenc:EncryptedData>
   <xenc:EncryptionMethod Algorithm="http://www.rsasecurity.com/rsalabs/pkcs/schemas/pkcs-5#pbes2">
      <pkcs-5:PBES2-params Algorithm="http://www.rsasecurity.com/rsalabs/pkcs/schemas/pkcs-5#pbkdf2">
         <pkcs-5:KeyDerivationFunc>
            <pkcs-5:Parameters>
              <pkcs-5:IterationCount>1024</pkcs-5:IterationCount>
            </pkcs-5:Parameters>
         </pkcs-5:KeyDerivationFunc>
      <pkcs-5:EncryptionScheme Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
         </pkcs-5:PBES2-params>
   </xenc:EncryptionMethod>
      <xenc:CipherData>
        <xenc:CipherValue>jeThdk8ZklnTlyKIat8Dkw</xenc:CipherValue>
      </xenc:CipherData>
      </xenc:EncryptedData>
   </sawcs:password>
</sawcs:credential>