How to export credential secrets using XMLAccess?

When using the XML command line client for credential export, the command syntax is slightly different than normal command line client use because there are two additional parameters:

xmlaccess -user user -password password -url https://myhost:9444/wps/config/ -in XML_file -out result_file.xml -credentialexport -passphrase encryptionPassphrase

The following rules apply to the above parameters:

1. The options credentialexport and passphrase are mandatory for export
   or import of encrypted credential secrets during migration.


2. The options credentialexport and passphrase are optional for all XML
   Configuration actions that do not export or import encrypted credential
   secrets during migration.

Additional XML Syntax elements for credential secret migration

Syntax element	Description
credentialexport	A parameter without value that indicates that export of credentials should be enabled
encryptionPassPhrase	The passphrase for the encryption. The minimum length of this string is the number of bits set as export keylength in Credential Vault Service, divided by 8. The passphrase is used to create a key of the specified length for the encryption.

For more information about the XML command line tool, refer
to the XML configuration interface section of the appropriate information
center version.

Sample file

ExportVault.xml for version 5.0.x

<?xml version="1.0" encoding="UTF-8"?> <request xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="PortalConfig_1.2.1.xsd" type="export" export-users="true"> <!-- Sample for exporting the credential vault data. --> <portal action="locate"> <credential-segment action="export" objectid="*"/> </portal> </request>

Sample file
ExportVault.xml for version 5.1.x

<?xml version="1.0" encoding="UTF-8"?> <request xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="PortalConfig_1.3.xsd" type="export" export-users="true"> <!-- Sample for exporting the credential vault data. --> <portal action="locate"> <credential-segment action="export" objectid="*"/> </portal> </request>

The following is an example of how to use the XML

configuration interface to export credential secrets:

xmlaccess.sh -user wpsadmin -password your_password -url http://portalhost:9444/wps/config/ -in ExportVault.xml -out ExportedCredentialSecrets.xml -credentialexport -passphrase JGD786JHga7kjhUIT7sdj76675zufurz