Self Service users password : encryption ???

Hi,

I was just wandering why Self Service users password are not encrypted in SelfService database ???

This should be a basic behaviour, shouldn't it ?

  • 0

    Hiya,

    Someone asked me about this a while back. I haven't looked at this since I worked on a case as a newbie back in ye olden days (2010), but I'd imagine that it should still work.

    The following will change the password field on the Self Service tab to a regular password field, and encrypt any new self service passwords using 3DES. If you want to encrypt old passwords, you’ll need to re-enter them.

    1: Go to Administration -> Customisation -> Visitor -> Screens, then change the visi_password field to another type (I selected WWW URL).

    2: In Management Studio, run the following:

    -- set the field length to 3x the

    -- max password length (required)

    USE CRMSelfService

    ALTER TABLE visitor

    ALTER COLUMN visi_password NVARCHAR (150)

    GO

    -- set the entry type to Password, and set

    -- the max entry lengths

    USE CRM

    UPDATE Custom_Edits SET ColP_EntryType = 49,

    ColP_DataSize = 50, ColP_LookupWidth = 50

    WHERE ColP_ColName = 'visi_password'

    GO

    Refresh the metadata, then do an IIS reset, and you're done.

    Hope this helps,

    Rob

  • 0

    Thanks Rob,,I will try it asap and tell you if it still works.

    Valérian