November 2004 Product Tip - Prolog

Up-to-the-Minute Corporate-Wide Analytics

View our webinar introducing Proliance 2.0

Product Tip of the Month – Prolog®

Enhanced Password Encryption

By Andrea Chase and John Hodgson , Meridian Senior Support Services Technical Analysts

Did you know that Prolog Application Suite 7.20 SP2 now offers two levels of password encryption for your Prolog database? Prolog 7.20 SP2 introduces Enhanced Encryption. This feature uses 128-bit encryption, one of the highest levels of protection.

The process of encryption stores data in a format that can only be identified through a corresponding decryption algorithm. This algorithm takes the original password and a key and alters the original password mathematically based on the key’s bits. The result is a new encrypted password. 128-bit encryption is 309,485,009,821,345,068,724,781,056 times more secure than 40-bit encryption.

Prolog user passwords are encrypted in the Prolog database as well as in Security Manager. In addition to Enhanced Encryption, Standard Encryption or no password encryption are also available.

Before using Enhanced Encryption, you may want to consider the following points.

  • Once Enhanced Encryption is applied to a database, it cannot be removed.
  • Enhanced Encryption applies to both Prolog Manager and Prolog WebSite passwords.
  • Once Enhanced Encryption is enabled, all Prolog installations must be upgraded to 7.20 SP2. Otherwise, users will receive an invalid password message.
  • User groups with the ‘Manage Users’ feature permission enabled do not have access to the ‘Options’ tab in ‘Security Manager’ where the password settings are maintained.
  • Importing user data from an Enhanced Encrypted database into a non-Enhanced Encrypted database will cause the password to expire and be null if the User does not exist in the non-Enhanced Encrypted database
  • If the User does exist in both databases, the password of the non-Enhanced Encryption database will be retained. The destination database password settings take precedence.
  • The password encryption setting does not affect how users type their passwords and applies to all projects in a portfolio.

This feature can be enabled in two ways, through Prolog Manager 'Security Manager' under the 'Options' tab or Prolog Manager Administrator under the 'Database' menu. To apply Enhanced Encryption to multiple databases, use Prolog Manager Administrator.

To Top ▲

Meridian Systems