How TeamCity stores passwords?
Can't find any information about storing passwords from build steps like "SMB Upload".
Question 1 - it stores in DB, or in server filesystem?
Question 2 - is password encrypted?
Please sign in to leave a comment.
Both answers are in our documentation:
Question 1: https://confluence.jetbrains.com/pages/viewpage.action?pageId=113084582#HowTo...-TeamCitySecurityNotes (towards the center of the "Security related risks evaluation" block: Passwords that are necessary to authenticate in external systems (like VCS, issue trackers, etc.) are stored in a scrambled form in TeamCity Data Directory and can also be stored in the database. However, the values are only scrambled, which means they can be retrieved by the users who have access to the server file system or database.)
Question 2: https://confluence.jetbrains.com/pages/viewpage.action?pageId=74845225#HowTo...-WhatEncryptionisUsedbyTeamCity
How can data be stored in the database? I noticed that the passwords are stored locally on disk only, though other settings are stored in the database.
Hi Peter,
I'm afraid that this is not a "choice" left to the user or admin. Where the data is stored is defined by the plugin storing the data. If you have any specific concerns, feel free to ask, or if you have specific requests, consider opening a feature request in our tracker: https://youtrack.jetbrains.com/issues/TW