I am using RDM with Microsoft SQL server and have been configured as db_owner for the database that is used for our passwords. Yet when I login and to administration>data source settings to see what the encryption settings are, I can't because the entire menu bar under administration is greyed out. Why is this greyed out, what other access do I need to have the ability to configure users and data source settings. I am using integrated authentication with the SQL server. I am trying to find what encryption settings are used for data that is stored in the database and where in the database is the passwords stored when using SQL to validate.
Also, when setting user specific credentials where is this information stored? Help says user specific local settings are stored in the user profile, so I am assuming the standard user specific settings are stored in the database. If so what type of encryption is used, what key is used and where is that stored?
Below are screenshots for the settings.
rdm2.JPG
rdm1.JPG
Hello,
Your user needs to be an administrator in RDM to have access to create users + the data source settings.
Best regards,
Jeff Dagenais
2016-11-01_16-19-34.jpg
when setting user specific credentials where is this information stored? Help says user specific local settings are stored in the user profile, so I am assuming the standard user specific settings are stored in the database. If so what type of encryption is used, what key is used and where is that stored?
Hello,
The User Specific Settings are stored in the database.
The Local Specific Settings are stored locally on the computer.
Yes, the User Specific Settings are encrypted in the database. RDM use the AES-256 bit encryption algorithm
http://help.remotedesktopmanager.com/gettingstarted_security.htm
Best regards,
Jeff Dagenais
the link you reference shows the below for encryption.
"A mix of our own private key and a master password (passphrase) is used to create a strong encryption key (256-bit key)." When using integrated AD authentication and a SQL server, no password is provided by the user who logs in. In that case is only your private key used to encrypt the password as well as the user specific password?
Hi,
It's a mix of our private key some element specific to the user.
Regards
David Hervieux