password hashing

Pega 7 provides password hashing functionality, which when applied, adds an extra layer of security to passwords.

The following hash functions are available for security architects to use with the Pega 7 authentication process for operator, ruleset, and update lock passwords:

• MD5
• SHA-1
• SHA-256
• SHA-512

Prconfig settings

There are two prconfig settings involved in the password hashing process:

• crypto/onewayhashalgorithm - defines the hashing algorithm used for saving new passwords, such as if the operator changes their password. "MD5" is set as the default value.
• crypto/updatehash - defines if the existing passwords should be updated. "False" is set as the default value.

For usage instructions, see PDN article About password hashing.

Open topic with navigation