You must encrypt the passwords because they are stored in the input file.

You can encrypt passwords using encrypt CLI. When encrypting the password, use a passphrase that is never stored anywhere. Ensure that you remember the passphrase, else you may need to redo this operation. You can encrypt many passwords at once with the same passphrase using the CLI. The encrypted password is printed to the console which can be copied into the input file. Every CLI needs the passphrase to decrypt passwords.

The passwords you typically encrypt (input fields) are:

  • TCA web access (443) password (tcaWebPassword)

  • TCA Appliance Manager (9443) password (appMgrPassword)

  • 3.0 VM admin password (cnPassword) - Optional

  • 3.0 VM root password (cnRootPassword) - Optional

  • vCenter password where the appliance needs to be deployed (vcPassword)

  • 3.0 TCA user password for platform manager (tca_user_passwd) - Optional

All the backups taken by the migration tool are encrypted.

Note:

Do not provide plain text passwords in the input file. For the set of appliances that are being migrated, all the passwords in the input file must be encrypted with the same passphrase.

The encrypt CLI:

Encrypt CLI Help

$ python3 vm_cn_migration.py encrypt -h
usage: vm_cn_migration.py encrypt [-h]

Interactive CLI to encrypt passwords for appliance using a passphrase

options:  
  -h, --help  show this help message and exit

The following is the CLI usage:

Encrypt CLI

admin [ /migration]$ python3 vm_cn_migration.py encrypt
Enter Passphrase:
Confirm Passphrase:
Enter password:
Encrypted password: yUrtoZ6KiL...FQWtcrzMH0q4qm2OjPGiC
Do you want to encrypt more passwords(y/n): y
Enter password:
Encrypted password: yUrtoZ6KiL...FQWtcrzMH0q4qm2OjPGiC
Do you want to encrypt more passwords(y/n): n