[wix-users] Password visible in the log file

[Griesshammer, Christoph (GE Healthcare)]

I know you had asked me this before. I don't know about any way to hide it without doing the research myself, so I have to request that you please research it.

I'm surprised that if the property is marked hidden, that it would allow burn to output it.

Remember, there's always the WiX email group (wix-users at lists.wixtoolset.org<mailto:wix-users at lists.wixtoolset.org>) that you can try. It's kind of hit or miss as to whether you'll get an answer, but it's worth trying.

Good luck,
Christoph

From: Pednekar, Veena (GE Healthcare) <veena.pednekar at ge.com>
Sent: Tuesday, May 5, 2020 1:07 PM
To: Larson, Eric R (GE Healthcare) <Eric.R.Larson at ge.com>; Griesshammer, Christoph (GE Healthcare) <christoph.griesshammer at ge.com>
Subject: Password visible in the log file

Hi Eric, Christoph,

With reference to our previous discussion on hiding the password getting displayed in the log files.

As per Christoph's suggestion making variable hidden helped.

But there is another log (mentioned below) was observed. (Logs attached.)

[1518:08F8][2020-05-04T01:18:49]i001: Burn v3.9.1208.0, Windows v10.0 (Build 14393: Service Pack 0), path: C:\CentricityInstallMedia\Current\AdminDesktop\AdminDesktop\AdminConsoleInstaller.exe, cmdline: '-burn.unelevated BurnPipe.{C00C8865-BB71-4DA6-AD1F-F0C68DFAC670} {D0B793FE-D088-4549-AED9-A3F8FA4B262B} 1596 -quiet -log C:/Support/RadiologyServiceTools/Logs/Admin_Desktop_Install_2020-05-04_011839.log ADDLOCAL="AdminWebServer" VALIDATE_USERNAME="administrator" VALIDATE_USERPASSWORD="LocalAdm1n!" '

Following things tried to remove this:

  1.  Hidden property set to true for VALIDATE_USERPASSWORD
  2.  Removing V(verbose) and I(Status) from MsiLogging property of AdminConsole msi.

Requesting you to suggest anything which can be tried to remove the burn command getting logged.
Will SDF triggers installation with verbose on? Anything which can be updated there.

Thanks and regards,
Veena Pednekar.