Is it possible to hide passwords or variables in the pil scripts

Ask Questions B&R Software & Runtime
1

We use the pil scripts to install the new software. With the cyber resilience act we need to use usernames and passwords. The current problem is that we start the script with

PVITransfer.exe -automatic -“Install.pil” -“Log.txt”

Everything is displayed in the output window and the log. It makes sense to hide a few commands, such as connection commands and password variables. The silent mode is not a solution because we can not figure out what is happening in the script and also afterwards. The next problem is we can not write the password static in the pil script.

I think we have three possiblities:

  1. We have to hide the password like in the command. Is it possible to create this via an external Program like opennssl or windows Powershell

    Connection “/IF=TCPIP”, “/IP=192.168.0.20 /COMT=350 /PT=11169 /UN=‘"admin’ /PW=‘wf0DC2URn/TwlWEd7t79FOVCYQjiUXPHCYCiscVUbmI=’”, “WT=30”

  2. We have to Include another pil script in the silent mode

  3. We have to call the connection command via exe and after that we will go on with the pil script (i don’t know how)

2

Hi Andre,
this topic is more complex than it seems. We have the same issue when it comes to online passwords in Automation Studio. We cannot store the passwords in a project or in Automation Studio when we want to be CRA compliant, not even if they are encrypted or hashed.

The most likely solution is to store the passwords in the windows credentials store and then reference the credentials in AS. The same solution could then be applied to the PVI Transfer script.

I don’t have an exact roadmap but my guess would be maybe 6.9 by the end of the year.

Stephan

3

Hi Stephan,

i know that this is more complex than it seems :wink:

My hope was that we would build a workaround using the available options but I would wait until the end of the year, then.