Page History

Starting Situation

Credentials

• Credentials are objects that include the specification of a user account and password that can be used for authenticattion:
  • HTTP Authentication with a JobScheduler Master.
  • HTTP Authentication with a Proxy.
• Credentials objects can be created once and can be re-used:
  • Credentials can be created within a PowerShell session. The PowerShell built-in Get-Credential cmdlet can be used to specify credentials on the fly, e.g. prompting the user for input of the user account and password.
  • Credentials can be created outside of a PowerShell session and can be used in a PowerShell session. The Get-JobSchedulerSystemCredentials cmdlet can be used to retrieve an existing credentials object for authentification with the JobScheduler Master.

Windows Credential Management

• Windows remembers accounts and  passwords that a user has been prompted for. The operating system will store user credentials in an encrypted file scheme known as the Windows Vault. Such credentials are used to automatically log on to a server/site without first being prompted to provide an account and password.
• Windows provides the Credential Manager API that allows to create, read, update and delete credentials objects.

• A number of tools are available for credential management based on the Windows Credential Manager API:

  • Use of the Windows cmdkey command.
  • Use of the Windows Credential Manager GUI front end for the Windows Vault. Search for "Credentials" (German: "Anmeldungsinformationsverwaltung") in the Windows Search Settings page.

  • In addition a vast number of tools is available for credentials management.

• Credentials can be managed in a number of scopes, e.g. generic credentials for a local environment and enterprise credentials for use within a domain.

...