Distribute 2 Secrets
Log In or Register to download the BES file, and more.

2 Votes

Description

 

Varient: This variation also includes, a second hardcoded secret. This is not secure on the console or database, but would be secure "in flight" and "on the endpoint" and "in all client logs". If you require "console secure" then you should only use the first method where the taker of the action has to type in the secret when taking the action.


Property Details

ID3678
StatusBeta - Preliminary testing ready for more
TitleDistribute 2 Secrets
DomainBESC
SourceInternal
Source Release Date7/31/2012 12:00:00 AM
KeywordsTakeSecureFixletAction Secret Encrypted Password
Added by on 12/21/2013 6:59:31 AM
Last Modified by on 12/21/2013 6:59:31 AM
Counters 8238 Views / 229 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Relevance

Used in 96 fixlets and 101 analyses   * Results in a true/false
Show indented relevance
true

Actions

Action 1 (default)

Action Link Click here to deploy this action.
Script Type BigFix Action Script
dos echo {parameter "secret" of action} > c:\secret
dos echo {parameter "secret2" of action} >> c:\secret

// uncomment this line to "clean up" the the secret in normal usage.
// delete c:\secret

// You may prefer to use the secret directly in commands instead of inserting it into a script file.
// if you choose this method, the plaintext secret will only exist briefly in memory on the endpoint during execution.
// dos net user adminstrator {parameter "secret" of action}
Success Criteria

This action will be considered successful when the applicability relevance evaluates to false.


Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!