TM1runTI using password file

[JamiseBondi]

Hi guys,

I've been looking on this forum and elsewhere for a way to use TM1runTI in a batch file but instead of using the password in clear text I'm wanting to hide this password.
According to the example below which is a batch file running the TM1RunTI.exe function:
"c:\program files\ibm\cognos\tm1_64\bin64\tm1runti.exe" -process TIprocess1 t -server adminserverA -server server123 -user admin -pwd mypassword

Can I use a password file instead of the "mypassword" used above in clear text? I'm trying to avoid having this admin password in a batch file that is easy for others to open up and read. Note, the location of the batch file is accessible to other developers (it's not the users who I'm trying to hide this pwd from). We're using TM1 authentication so we need to authenticate our connections to the TM1 servers.

I've seen how TM1crypt.exe is used to create a password file and keyfile but my understanding is that this keyfile is used (in conjunction with the "outfile") to pass the encrypted password for the private key in an SSL session when connecting to the admin host. link to related article:
http://pic.dhe.ibm.com/infocenter/ctm1/ ... 208c6.html

The password used here appears to be the one used in protecting the private key in the SSL connection. Is there a way I can provide a password file (encrypted) for a particular username (using TM1 authentication) when using the TM1runTI.exe function in a batch file so that I don't have a password in plain text contained in the batch file?

thanks..

[Andy Key]

The link you provided is documenting one specific use of tm1crypt.

This one says that you can also use it for encrypting password files for tm1runti, it's just that the documentation of tm1crypt hasn't been updated.

[JamiseBondi]

Thanks Andy,

I've used the Tm1Crypt tool to create the two needed files (I left the names as default so they're tm1key.dat and tm1cipher.dat) and I've used this exact batch file with the plain text password and it works successfully so all that's changed is that password files are being used instead of the clear test password. this is the output I get when I try to run it:
C:\Backups> "c:\program files\ibm\cognos\tm1_64\bin64\tm1runti.exe" -process Clear_ABAC1_B00_13
-connect -server srvCaf01 -server baltd -user jheines -passwordfile C:\TM1Data\Baltd\Security\tm1key
.dat -passwordkeyfile C:\TM1Data\Baltd\Security\tm1cipher.dat

Error padding is incorrect
(TM1 API Error) SystemServerClientPasswordInvalid
Server connection failed

I've tried with a few different passwords (and recreating the keys each time) in case there were some characters that were unsupported but it all yields the same error. When I remove the passwordfile parameters and use -pwd 123 (for example) it works without a hitch...
The link here doesn't include this type of error:
http://pic.dhe.ibm.com/infocenter/ctm1/ ... sages.html

This link talks about a similar error in previous versions:
http://www-01.ibm.com/support/docview.w ... wg1PM02427


Any ideas?

[Andy Key]

Aren't those file names the wrong way round?

Code: Select all

c:\program files\ibm\cognos\tm1_64\bin64\tm1runti.exe" -process Clear_ABAC1_B00_13 -connect -server srvCaf01 -server baltd -user jheines -passwordfile C:\TM1Data\Baltd\Security\tm1cipher.dat -passwordkeyfile C:\TM1Data\Baltd\Security\tm1key.dat

[JamiseBondi]

Spot on Andy!
A bit of dyslexia creeping into the mix
It's working perfectly, thanks very much.