encrypt setup file

[Venzi_]

Hello,

1) can I encrypt the setup file when created using the password typed on the UI or set via REST Post request?

I would like to have an encrypted setup file, which I upload and apply via REST.

2) What is the function of the password typed in the UI?

It seems when setup is created and password is set, the password is not required for applying of that setup file.

Thanks,

Venzi

[nickH]

Hi @Venzi_ 

I think the current implementation of the password does not make sense. I forwarded your issue internally. I will let you know when I got news for you. 

Thanks for reporting and best regards,

Nick

[CodeShepherd · Accepted solution]

As an update to this topic, here the current state:

The setup file format should also be used to enable serial commissioning. Thus, we only use the password encryption for known secrets like certificate keys or passwords in clear text, but not for the whole contents of the setup file.

You may use another encryption step to password-protect the downloaded zip archive.