please take a look at security

[#1]

of default passwords

sa

autodeskvault

vaultsys

all default passwords and in cleartext in web.conf

[#2]

Thank you for posting this idea. The SA password is not stored in the web.config file. If it is not the default, the console will prompt for the correct password.

[#3]

hi irvin,

yeah, but vaultsys who is sysadmin on the sql server is in the webconfig.

br

hannes

[#4]

There is also an issue when using non-default SA passwords and using a backup script (connectivity.ADMSconsole). The SA password is exposed in the backup script in plain text - which is a security issue.