Password generated for AES encryption key when using Windows MSI?

[Cantor, Scott]

> When you install Shib IdP v3.2.1 using the Windows MSI, it appears that it
> generates a password for the AES/sealer store. But it doesn't ask for a
> password, and it appears to be a hashed form of the password stored in
> idp.properties (some {long sting} value). What is the source of this
> password?

I wasn't aware it didn't prompt, but FWIW, I don't think we support any kind of obfuscation. I think that's the password you're seeing. So maybe Rod just realized that it probably made sense to randomize that on a new install, and I'm inclned to agree. Probably we should be doing that in the non-MSI case.

-- Scott