You can encrypt passwords to create an environment variable to use with infacmd, infasetup, pmcmd, and pmrep or to define a password in a parameter file.

For example, you can encrypt the repository and database passwords for pmrep to maintain security when using pmrep in scripts. Then you can create an environment variable to store the encrypted password. Or, you can define a password for a relational database connection object in a parameter file.

Use the command line program pmpasswd to encrypt passwords.

The pmpasswd utility uses a AES/CBC/PKCS5 padding cipher and generates a base64 encoded and AES-128 bit encrypted password.

The pmpasswd utility installs in the following directory:

The pmpasswd utility uses the following syntax:

The following table describes pmpasswd options and arguments: