Monday, April 13, 2015

How to encrypt the SQL connection string passwords in WebCenter Forms Recognition

This walkthrough will show an example of using WFR's INI File Encryption features as described in section 5.14 of the installation guide.

The Install guide has a good walkthrough of the steps, but it's not 100% specific to the AP Solution. It does require a few decisions not included in the document.

1. You should have your own XML-formate RSA key pair. Brainware states to receive this keypair directly from Brainware support, but Oracle's doc does not include that statement. I've found that the easiest way to generate the key is to use a simple java app to format it as needed. I'll attach a link to the java app at the bottom. Note that this is using, but BouncyCastle should be usable as well, if desired. You can also use the sample keypair provided in the doc, but this should not be used for production as it it not secure (the private key is published in the doc!)

2. Take your ini file and remove the password from the SQL_VL_##_ConnectionString   . The way the encryption works is to decrypt the password, then it will append it back to the ConnectionString before the script actually attempts to create a db connection with it

3. Create a matching SQL_VL_##_ConnectionPassword=<my encrypted password> entry in the ini file. we'll cover how to create the encrypted password a few steps down

4. Open your sdp in Designer. Show Scripts. Go to Sheet #2.

5. Enable the CdrCrypt Reference (figure 5-3 in the install doc)

6. Take the supplied sample script and update to your Private key (be sure to remove any line feeds!), or use the supplied if POC/DEV

7. Paste the script into the fnSetDBConnection (or create your own function and call the function from this location); place it as follows:

On Error GoTo lbl_error


fnSetDBConnection =1
blFoundEmptyConnection = False

8. In a command prompt, cd to <wfr_home>/bin/bin

9. Run the following command to get the encrypted string used in step #3:

DstCrypt.exe /text "MyClearTextPassword" /key "<myPUBLICkey>" >> my_enc_password.txt

10. find your encrypted string at the end of the output:

Text <cleartextpassword> encoded to XBj9I3tuiu+f/XZBH1qIENWGFdoNkmFdtvc3L8LMdBH[...]

11. Paste your enc password into the ini file as stated in #3

12. Save and verify your sdp changes

13. Test!

Troubleshooting tips:
** You can use the script to place file outputs to verify each step of the way.
** If you notice nothing is happening, comment out the "On Error GoTo lbl_error" line; this will allow the errors to output to the RTS console
** If you're getting object errors on the .decrypt function call; make sure you have patched your WFR 11g instance with the two Web Verifier patches; the name of the patch states "Web Verifier", but Patch #2 contains patches for the core products. Also, be sure to deploy both patches since they are not cumulative. Even if you're not using Web Verifier, go ahead and apply these patches.

Oracle may be providing a script sample for this in the future. I'll be sure to update to reflect the supported method. But, as of 2015/04/12, nothing has been published.

Hope that helps!


  1. This comment has been removed by a blog administrator.

  2. This comment has been removed by a blog administrator.

  3. Thank you for the tutorial! It's very useful!
    json formatter

  4. Nerds support provides high quality IT Services and cloud computing services in Miami and South Florida. Find award-winning VoIP service and its experts in Miami today!

  5. If you are in Jaipur and need beautiful Jaipur Call Girl or white skin Jaipur Call Girls then you can simply book call girls in Jaipur from one of the best escort agency named Jaipur Call Girls. It is No.1 premier escort agency and provide both incall or outcall facility to clients.Please click on the following link to check the official websites Jaipur Call Girl

  6. insect control company door.
    Insects, which are a major source of inconvenience to individuals and they also pose a great danger to them where they are found and spread in various places and institutions and often difficult to control and it becomes Egypt anxiety and large pollution شركة مكافحة حشرات
    شركة مكافحه النمل الابيض بالمجمعة
    شركة مكافحه حشرات بالمجمعة

  7. thanks for sharing such a wonderful information from this post
    digital marketing

  8. I love programming, but sometimes it is very tiring. After work, I relax playing online games. I can always choose an interesting game on Nightrush and enjoy.

  9. I admire this article for the well-researched content and excellent wording. I got so involved in this material that I couldn’t stop reading. I am impressed with your work and skill. Thank you so much.

    mobile phone repair in Louisville
    mobile phone repair in Beachwood
    mobile phone repair in Bensalem
    mobile phone repair in Dubuque
    mobile phone repair in Winston-Salem

  10. Thank you very much for publishing this kind of article. I like your article very much.
    I want to share my website details with you please give me some information to increase
    performance like as your website.

  11. Why is it so important to buy instagram followers cheap? Well, it's because Instagram doesn't really care about the law. The rules on selling products on the internet don't apply, because no one is actually breaking them. Therefore, you should do everything you can to avoid getting arrested.

  12. Choose One of the best viral buy tiktok followers uk programs. Whether you are someone who wants to get their name out there, your talent to be admired, and your social profile to be viewed, you've come to the right place!

  13. The last thing you should remember is to take time to network, practice online marketing and try different strategies. This will make sure that you always have something that will work for your business. and keep on buy instagram followers australia

  14. Encrypting the SQL connection string passwords in WebCenter Forms Recognition is not an easy job for novice man, thanks for creating such nice tutorial. Students may need programming help to solve this without this tutorial.

  15. Thanks for sharing such a nice piece of information to us. This is very knowledgeable for me. I am an assignment expert and I am offering Assignment Help to students of Australia and all over the world. Edit my paper

  16. I would like to be your pen friend...You can write me email on for
    Guwahati Escort
    Guwahati Escort
    Guwahati Escort
    Guwahati Escort

  17. I was very happy to find this site. I really enjoyed reading this article today and think it might be one of the best articles I have read so far. I wanted to thank you for this excellent reading !! I really enjoy every part and have bookmarked you to see the new things you post. Well done for this excellent article. Please keep this work of the same quality.
    Data Science Course in Bangalore

  18. Very informative blog, and beautifully elaborating the complete information about the topic. We are from the same domain emerging as the top mobile app development company for versatile app creation services. You can email us at or Phone Number: +91-9717270746