Project secrets encryption
Encrypt sensitive data contained in projects within a specific organization.
Requirements
To encrypt project secrets, while creating a project or saving an existing project:
- Log on to FactoryTalk Hub in FactoryTalk Optix Studio.
- Be a part of an organization.
- Select Encrypt secrets.
Encryption scope
FactoryTalk Optix:
- Encrypts passwords in projects.
- Encrypts custom objects with the Password DataType.
- In the project YAML files, which represent the project information model, replaces
Value
nodes withSecretValue
nodes with encrypted text values.
Projects with encrypted secrets
FactoryTalk Optix handles encrypted projects in a variety of ways:
- Opening an encrypted project when you do not have access to the organization used to create the project blanks all project secrets.
- Saving an encrypted project as an unencrypted project removes all secrets.
Tip: User passwords are not considered secrets and are not encrypted with FactoryTalk Hub key.
- Deploying an encrypted project to an unencrypted client displays a warning message. For more information, see Project encryption on a client device.
- Pasting an object from an encrypted project to an unencrypted project blanks the secrets.
- Adding an object to the Template Libraries in an encrypted project blanks the secrets.
- Pasting a password as a text to the clipboard is disabled in encrypted projects.