Securing the Batch Client

The Batch Client is used to perform batch processes in Oracle Data Relationship Management. It requires a username and password to connect to the Data Relationship Management server.

The Batch Client can use the Windows Data Protection API (DPAPI) to allow a more secure method to storing credentials for the Batch Client. The DPAPI protects the information and places it in a location that is only accessible to the user that creates it. Data Relationship Management provides a command line utility that can set the credentials used by the Batch Client.

When the Batch Client runs and no credentials are passed on the command line or in the configuration file, then it uses the credentials stored using the Windows DPAPI.

Setting up Batch Client Credentials

The Credential Utility (drm-batch-client-credentials.exe) is used to set up the username and password credentials for the batch. The Credential Utility associates a Data Relationship Management user to the current Windows account in order to execute the Batch Connect tool securely.

The following command line parameters are valid:

• Add — Stores Data Relationship Management credentials for the current Windows account.

• Clear — Clears the Data Relationship Management credentials for the current Windows account from the secure store.

• Info — Displays the Data Relationship Management username associated with the current Windows account.

• ? — Displays the help file.

If no arguments are passed, the Credential Utility launches an interactive prompt.