Introduction

The JITL Encrypt Job template can be used encrypt values and files.

The job template makes use of the JS7 - REST Web Service API to run reports from the JOC Cockpit.

The job template authenticates with the JS7 - REST Web Service API with a user account/password and/or with a certificate, for details see JS7 - Authentication.
For details about configuration items see JS7 - JITL Common Authentication.

FEATURE AVAILABILITY STARTING FROM RELEASE 2.7.1

Usage

When defining the job either:

invoke the Wizard that is available from the Job Properties tab in the Configuration view and select the JITL Encrypt Job Template and relevant arguments

or

specify the JITL job class and com.sos.jitl.jobs.encrypt.EncryptJob Java class name..

Name	Description
`encipherment_certificate`	The CA signed or self-signed X.509 certificate. Alternatively the public key can be specified. This variable is normally provided via a job resource that is managed with the certificate management.
`in`	Specifies the input value that should be encrypted, typically a secret. One of the options 'in' or 'infile' has to be specified.
infile	Specifies the path to a file that should be encrypted. One of the options 'in' or 'infile' has to be specified. This option requires use of the 'outfile' .
outfile	Specifies the path to the output file that will be created holding the encrypted content of the input file. The option is used if 'infile' is specified.

Name	Description
`js7EncryptedValue`	When infile is specified the value contains the encrypted symmetric key the initialization vector the path to encrypted file separated by space. When infile is not specified. the encrypted symmetric key the initialization vector the encrypted value The value is needed for decoding: The encrypted symmetric key is decrypted with the private key The encrypted file is decrypted using the decrypted symmetric key and the initialisation vector.
`in`	Specifies the input value that should be encrypted, typically a secret. One of the options 'in' or 'infile' has to be specified.
infile	Specifies the path to a file that should be encrypted. One of the options 'in' or 'infile' has to be specified. This option requires use of the 'outfile' .
outfile	Specifies the path to the output file that will be created holding the encrypted content of the input file. The option is used if 'infile' is specified.

This example workflow includes 3 jobs

job_encrypt: For encrypting a value. The certificate is assigned directly as a string value. The value for the certificate can also be provided by a job resource.
job_result: to display the result of the encryption.
decrypt_secret: to decrypt the encrypted value. Decryption is performed with the script js7_decrypt.sh. Please refere to https://kb.sos-berlin.com/x/Qx1SC

The workflow configuration can be downloaded from here: encryptionValue.workflow.json