2.2.3 Password in clear text format in adobe-ds.xml

The application server that is used to run LiveCycle requires its own configuration for access to your database through a data source that is configured on the application server. You should ensure that your application server does not expose your database password in clear text in its data source configuration file.

The adobe-ds.xml file contains passwords in clear text format. Consult your application server vendor about how to encrypt these passwords for your application server. For example, the JBoss® instructions are at Encrypting DataSource Passwords.

Note: The LiveCycle JBoss turnkey installer encrypts the database password.

IBM WebSphere Application Server and Oracle WebLogic Server may encrypt data source passwords by default. However, you should confirm with your application server documentation to ensure that this is happening.

// Ethnio survey code removed