How do I get properly encrypted credentials into password.conf deployed from a Deployment Server?

[wegscd]

"Safe" (non-cleartext) storage of credentials in password.conf accessed via the /storage/password endpoint is well documented, as well as configuring them using an app-specific setup screen.

What if I want to deploy via Deployment Server? How do I get properly encrypted credentials into password.conf?

[mreynov_splunk]

This may be helpful: http://docs.splunk.com/Documentation/Splunk/6.0/Security/Deploysecurepasswordsacrossmultipleservers

[wegscd]

I'm missing the connection between this and the /storage/password endpoint?

[dwaddle]

The connection is implied. Anywhere you see Splunk storing an encrypted password using the form $1$ this is Splunk's symmetric password encryption. The content of splunk.secret is used as an encryption key in this scheme.

If your servers all use the same splunk.secret file, then you can push a pre-encrypted password directly using deployment server. If your servers do not all use the same splunk.secret, you're hosed.