Skip to main content
  • EN

Is there any official documentation that specifies the encryption specification used by FME desktop to store passwords (e.g. ORACLE connection string passwords)? Specifically what encryption algorithms and keys length combinations are available?

Only a few combination are acceptable to the Australian Federal Government. This is required for my organisation security section to sign off on the future use of FME.

Hi @marcusblake FME uses AES 128 bit encryption to store passwords. If you'd like the option of other encryption types then please post that at https://knowledge.safe.com/content/idea/list.html

Hi @marcusblake FME uses AES 128 bit encryption to store passwords. If you'd like the option of other encryption types then please post that at https://knowledge.safe.com/content/idea/list.html

Thanks Dan...looks like AES128 is one of the approved systems.

 


 

For your info...here's a reference to the Australian Government Information Security Manual.

 

"The approved symmetric encryption algorithms are AES128,
AES192, AES256, and 3DES (page 242): https://acsc.gov.au/publications/Information_Security_Manual_2017_Controls.pdf

 

 

And a related question... for the same Australian Security requirements, can you please advise which algorithm is being used for FME Server "Restricted" mode security?

And a related question... for the same Australian Security requirements, can you please advise which algorithm is being used for FME Server "Restricted" mode security?

Hi @nic_ran

 

FME Server System Encryption uses AES algorithm with 128bit encryption.

 

Let me know if you have any further questions.

And a related question... for the same Australian Security requirements, can you please advise which algorithm is being used for FME Server "Restricted" mode security?

Thanks Jen.

Updating your comment to include some additional information you shared with me via email...

  • The encryption applies to projects, as well as backups.
  • We only encrypt sensitive data (not all data), and we don't encrypt fme server tokens (yet). Work is being done now to pave the way for token encryption but it won't be in 2019.0.

Reply


Community Stats

30,351
Posts
115,342
Replies
38,085
Members
Terms & ConditionsCookie settings
A product of
Safe Software respectfully acknowledges that we live, learn and work on the traditional and unceded territories of the Kwantlen, Katzie, and Semiahmoo First Nations.