https://community.splunk.com/t5/Splunk-Enterprise-Security/In-Enterprise-Security-s-credential-manager-are-the-passwords/m-p/475380#M7445 <P>As you are Splunk staff, you can hit up the prodsec team if you need more explicit details.</P> Wed, 11 Sep 2019 21:32:48 GMT starcher 2019-09-11T21:32:48Z https://community.splunk.com/t5/Splunk-Enterprise-Security/In-Enterprise-Security-s-credential-manager-are-the-passwords/m-p/475378#M7443 <P>This is just a question if credential manager uses encryption.</P> Wed, 11 Sep 2019 13:40:41 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/In-Enterprise-Security-s-credential-manager-are-the-passwords/m-p/475378#M7443 mrockowitz_splu 2019-09-11T13:40:41Z https://community.splunk.com/t5/Splunk-Enterprise-Security/In-Enterprise-Security-s-credential-manager-are-the-passwords/m-p/475379#M7444 <P><A href="http://www.georgestarcher.com/splunk-stored-encrypted-credentials/" target="_blank">http://www.georgestarcher.com/splunk-stored-encrypted-credentials/</A></P> <P>Yes, but anyone with a splunk login that has the capability in it's role:list_storage_passwords can dump them. Basically it is good enough to say the credentials are not stored in the clear in configuration files.</P> Wed, 30 Sep 2020 02:10:44 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/In-Enterprise-Security-s-credential-manager-are-the-passwords/m-p/475379#M7444 starcher 2020-09-30T02:10:44Z https://community.splunk.com/t5/Splunk-Enterprise-Security/In-Enterprise-Security-s-credential-manager-are-the-passwords/m-p/475380#M7445 <P>As you are Splunk staff, you can hit up the prodsec team if you need more explicit details.</P> Wed, 11 Sep 2019 21:32:48 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/In-Enterprise-Security-s-credential-manager-are-the-passwords/m-p/475380#M7445 starcher 2019-09-11T21:32:48Z