Password security

If MICROS OSCAR POS45_048 is used with a SQL database, it is to ensure that the necessary entries in "oscar.ini" or "oscar.def" must be encrypted.

 

Changes in oscar.ini / oscar.def:

 

Since OSCAR POS45_048 the following environment variables must be stored encrypted in the database.

OSCAR_SQL_USER

OSCAR_SQL_PASSWD

OSCAR_SQL


The new tool "EncryptPW.exe" in the folder ..\bin must be used to generate the encrypted entries for oscar.ini /oscar.def:


Command:

encryptPW text1 [text2 [text3]]

 

With this tool, up to 3 texts can be encrypted at the same time. The resulting values must be entered in "oscar.ini" or "oscar.def".

 

Example:

A database named "OscarDB" is used with username "TestUser" and password "This is a test account". So far as the following in the oscar.ini:

 

OSCAR_SQL_USER=TestUser

OSCAR_SQL_PASSWD=This is a test account

OSCAR_SQL=OscarDb

 

The EncryptPW.exe must be called as follow:

encryptPW.exe This is a test account TestUser OscarDb

The command returns the following values.

This is a test account -> UUwFjIoQ8OcK/PK6NaAijqJmCXMgi/kh9ag3Zxwjghk=

TestUser -> D2rcqfTczO8Edq1eHAjFsg= =

OscarDb -> dHmzipEcCmaUNztxZlNRkQ= =

The values behind „ -> “ must be entered in the file oscar.ini / oscar.def:

OSCAR_SQL_USER=D2rcqfTczO8Edq1eHAjFsg= =

OSCAR_SQL_PASSWD=UUwFjIoQ8OcK/PK6NaAijqJmCXMgi/kh9ag3Zxwjghk=

OSCAR_SQL=dHmzipEcCmaUNztxZlNRkQ= =

 


MICROS Retail Deutschland GmbH
Salzufer 8
D-10587 Berlin