Project secrets encryption

Project secrets encryption

Encrypt secrets in projects or use a password that is stored locally in project files.

Requirements

Encrypt project secrets while creating a project. See Create a project.

Encryption scope

FactoryTalk Optix
:
  • Encrypts passwords in projects.
  • Encrypts custom objects with the Password DataType.
  • In the project
    YAML
     files, which represent the project information model, replaces
    Value
     nodes with
    SecretValue
     nodes with encrypted text values.

Projects with encrypted secrets

FactoryTalk Optix
 handles encrypted projects in the following way:
  • Opening a project with encrypted secrets when you do not have access to the organization used to create the project or you continue without providing a user password blanks all project secrets.
  • Saving an encrypted project as an unencrypted project removes all secrets.
    TIP: Passwords for user accounts in projects are not considered secrets and are not encrypted with FactoryTalk Hub keys. Passwords for user accounts in projects are securely stored using a hash algorithm.
  • Deploying an encrypted project to an unencrypted client displays a warning message. For more information, see Project encryption on a target device.
  • Pasting an object from an encrypted project to an unencrypted project blanks the secrets.
  • Adding an object to the Template Libraries in an encrypted project blanks the secrets.
  • Pasting a password as a text to the clipboard is disabled in encrypted projects.
Provide Feedback
Have questions or feedback about this documentation? Please submit your feedback here.