SAPwd challenge on setup about sqlserverdsc HOT 5 CLOSED

Thank you @johlju for the assistance. Closing this task.

from sqlserverdsc.

In production you should use certificates to encrypt and decrypt PSCredential object, otherwise they will be in clear text in the compiled MOF file.

For non-production environment (e.g lab environment) you can override it by saying it should allow clear-text password.

See here for more information: https://learn.microsoft.com/en-us/powershell/dsc/configurations/configdatacredentials?view=dsc-1.1

from sqlserverdsc.

In production you should use certificates to encrypt and decrypt PSCredential object, otherwise they will be in clear text in the compiled MOF file.

For non-production environment (e.g lab environment) you can override it by saying it should allow clear-text password.

See here for more information: https://learn.microsoft.com/en-us/powershell/dsc/configurations/configdatacredentials?view=dsc-1.1

Thank you @johlju. Follow-up question, and I haven't looked so if this is quickly searchable I apologize in advance for my laziness, but is the cert and such something that can be done inside DSC before we get to the sqlsetup part?

Thanks,
Nathan

from sqlserverdsc.

You answered the question yourself already, the link you provided in the issue description. 🙂 It describes what is needed.
You can't set up the certificate part in the same configuration your compiling because that would be a catch-22. You can't compile it because you need a cert and you can't get a cert because you can't compile.

You need to set up the certificate on the target node and use that to compile the configuration. Also (assuming you using LCM) you need to configure LCM on the target node with the certificate so you can use the compiled configuration (so it ca decrypt the secret information).

from sqlserverdsc.

ah, I see what you are saying. Makes sense. Really appreciate your help and support. Time to talk with Windows and InfoSec to see how we can do this.
Nathan

from sqlserverdsc.