Commit 184c7fa8 authored by Olivier De Marchi's avatar Olivier De Marchi
Browse files

Merge branch 'master' of gitlab.in2p3.fr:resinfo-gt/swmb/resinfo-swmb

parents ce48703b 7bb27eeb
......@@ -13,10 +13,27 @@ $Global:SWMB_Custom{'KesSecureString'} = ""
$Global:SWMB_Custom{'KesKeyFile'} = ""
```
Howto create a blurred password ?
You can choose to put the password to modify Kasperky in clear text
or to scramble it via a symmetric encryption process.
How to create a blurred password?
Launch the command
A small script is provided [blur-password.ps1](blur-password.ps1).
It asks you for a file name to store the encryption key and password.
The blurred word will then be displayed on the console.
You have to write these values in the `Custom-VarOverload.psm1` file.
Finally, the file containing the encryption key should be put next
to the file of this configuration file (in the same folder).
You can verify that this password is blurred by doing the reverse
operation via the [clear-password.ps1](clear-password.ps1) script.
Finally, regardless of the method chosen for the password,
the Kapersky uninstallation operation is launched
with the following command:
```ps1
"C:\Program Files\SWMB\swmb.ps" -exp RemoveKasperskyEndpoint
```
To learn more about [encrypting credentials](https://www.pdq.com/blog/secure-password-with-powershell-encrypting-credentials-part-1/).
......@@ -7,4 +7,8 @@ $Key = New-Object Byte[] 32 # create key AES 256-bit key (32 bytes)
$Key | Out-File $KeyFile
$EncryptedPass = ConvertFrom-SecureString -SecureString $Password -key $Key
Write-Output $EncryptedPass
Write-Output ""
Write-Output "`$Global:SWMB_Custom{'KesSecureString'} = '$EncryptedPass'"
Write-Output "`$Global:SWMB_Custom{'KesKeyFile'} = '$KeyFile'"
Write-Output ""
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment