CRM.cryptographic tool

Use CRM.cryptographic tool (update.crypto.exe) to encrypt/decrypt files and XML documents used/produced by Aurea CRM.

You can:

  • encrypt XML files (partially or entire files), e.g. to encrypt the connection string in the settings.xml file used by Aurea CRM web.

    To partially encrypt an XML file use the XML attribute encrypt:

    <?XML version="1.0"?>
    <sample xmlns:uxe="http://schema.update.com/xmlenc#">
    <sensitiveInformation uxe:encrypt="True">my secret password</sensitiveInformation>
    </sample>
  • decrypt XML files (partially or entire files)
  • encrypt and sign documents (using X509 Certificates, file extension .p7m)

    For details on encrypting documents, see Security.

    The certificate's private key (used for encryption) is required to decrypt the documents.

  • verify the signature of signed files
  • decrypt signed documents

update.crypto.exe is located in Aurea CRM webs' ..\bin directory.

Use CRM.cryptographic tool to encrypt the settings.xml and Offline.xml files. To encrypt the users.xml, use CRM.users tool, see CRM.users tool.

User Interface

Command Line Parameters

Usage: update.crypto operation [OPTIONS]

Operation

decrypt

Decrypts a file (*.p7m).

encrypt

Signs and encrypts a file (creates a *.p7m file).

verify

Verifies the signature of a signed and encrypted file (*.p7m).

encryptxml

Encrypts an XML file.

decryptxml

Decrypts an XML file.

[OPTIONS]

-h, -?, --help

Show help.

-f, --file, --files=VALUE

The file name

-o, --output=VALUE The output file name or directory.
-k, --key=VALUE The name of the encryption key.
--keyid=VALUE The id to be used for the key stored in the XML file (operation encryptxml).
--xpath=VALUE An XPath expression defining the elements to encrypt (operation encryptxml).
-c, --cert, --certificate, --cer=VALUE The output file name or directory.
--ms If set use the Local Machine store to retrieve keys and certificates.
--di, --deleteinput Deletes the input files after decryption (operation decrypt)
-l, --log=VALUE Specifies the name of a log file.

For more information and examples, see the article “How to Use update.crypto.exe” at https://support.aurea.com.