Where are Cube credentials stored?

Solved1.17K viewsCube security
6
0 Comments

Hi,

During a security audit of a Citrix environment in which our Cube Desktop Application is running, the question came up where/how the Cube credentials are exactly stored, in case a user opts to save them.

Could anyone shed a light on this, please?

Thanks!

Ruben Vandepitte [SLC] [DevOps Advocate] Selected answer as best 27th January 2021

1 Answer

12
4.87K 1 Comment

Up until DataMiner version 10.0.9 the last used credentials were saved in a file %AppData%\Skyline\DataMiner\SavedUser.dat. Starting from DataMiner version 10.0.9 (RN26483) we store the last used credentials per individual DataMiner/cluster in a file %AppData%\Skyline\DataMiner\SavedUsers.dat. For backwards compatibility, the globally last used credentials are still stored in SavedUser.dat as well.

These files are encrypted using the .NET Framework System.Security.Cryptography.ProtectedData class, which uses the Windows Data Protection API (DPAPI). This is the same encryption as is used by the Windows Credential Manager and is tied to the current Windows (domain)account.

Bert Buysschaert [SLC] [DevOps Advocate] Edited answer 27th January 2021