Hi,
we use an MSSQL Datasource with SharedPassphrase Security Provider.
As i'm currently in the process to create a PS script to deploy our datasources i want to know if it is also possible to set the passphrase needed via PS so the users don't have to enter it on the first time when connection to the DS(this window popsup on first connect).
I found the Set-RDMDatasourceMasterKey CMDlet but thats only for Local DS.
Hello,
Sadly it is not possible to set the Security Provider with the RDM PowerShell module even when creating a new data source.
A workaround would be to use a certificate instead of the Shared Passphrase as the Security Provider. Then you just have to deploy that certificate on the users' computers. In that case, you will have to switch your Security Provider from the passphrase to the certificate. If you plan to switch it, it will be important to first remove the actual shared passphrase and then re-encrypt the database with the certificate security provider. Be sure to do a full database backup between each steps for safety measures.
Best regards,
Érica Poirier
Ok thanks for clarification - i will investigate if it is suitable to use certificates for this.
I'm also currently migrating the SQL Server used for the RDM Databases - is it possible to change just the server in an exisiting datasource without the need to reenter the Passphrase? (it's a 1:1 migration so same database, same setup, same passphrase onlythe server name has changed).
Hello,
I am not 100% sure about it but I think you can modify the server name and even the database name as long as you do not create another data source configuration. I did test it by connecting the same data source on a restored database on the same SQL server and didn't get a Shared Passphrase prompt.
Best regards,
Érica Poirier