topic RE: Blue prism Data encryption for work queue in Product Forum

Blue prism Data encryption for work queue

MayankGoyal2 — Sun, 07 Jun 2020 08:10:00 GMT

Hi, Kindly suggest if the data that we store in blue prism work queue is automatically stored as encrypted or do we need to encrypt it using VBO 'Utility Encryption' before loading to work queue.
Also the data that we retrieve back from queue is actual value, if we want to encrypt it when passing from process to object, kindly suggest what is the value of Key to provide in utility Encryption and from where can we get this value.

------------------------------
Mayank Goyal
------------------------------

RE: Blue prism Data encryption for work queue

max.elopre — Mon, 08 Jun 2020 19:50:00 GMT

Hi Mayank,

You can encrypt work queues in System Manager – Workflow:
Reference:
https://bpdocs.blueprism.com/bp-6-8/en-us/helpQueues.htm?tocpath=Interface%7CStudio%7CProcess%20studio%7C_____5

Best,

------------------------------
Max Elopre
Technical Consultant
Chicago IL
------------------------------

RE: Blue prism Data encryption for work queue

Kirti — Tue, 09 Jun 2020 06:25:00 GMT

Hi Mayank,

I have alternate solution for encrypting work queue data.
Let's assume that we have 10 account number of customer. As it's PII data we can't add account number into the queue directly so we need to encrypt data.
So, before adding the collection with 10 account number into the queue, we need to append one field ex. Item Key in the same collection. After that we need to run loop on the collection and take one calculation stage inside the loop and replace first 2 digits with XX and append today's date at the end an store the result in to Item Key. After completing the loop for all 10 items, add item to queue. In this way your work queue data will be encrypted. Also, make sure to update the System->Workflow ->WorkQueue Key Name property as Item Key.

Please let me know in case of any questions.

------------------------------
Kirti
------------------------------

RE: Blue prism Data encryption for work queue

MayankGoyal2 — Tue, 09 Jun 2020 17:29:00 GMT

@max.elopre - Thanks a lot for your response. I tried encrypting the work queue data with standard steps mentioned. In system tab -> work queue I have Encrypted check box selected and a Default encryption scheme selected in dropdown.
I added a item in WQ with Key and I am still able to see the key. I was expecting after encrypting data, the key will show as Encrypted.

------------------------------
Mayank Goyal
------------------------------

RE: Blue prism Data encryption for work queue

MayankGoyal2 — Tue, 09 Jun 2020 17:33:00 GMT

@Kirti - Creating a custom key by adding XX or something is one way of doing it, however we want to use the standard encryption mechanism provided by blue prism either using Encrypt Queue option provided in system tabs or using VBO - Encryption, however both are not working as of now.

------------------------------
Mayank Goyal
------------------------------

RE: Blue prism Data encryption for work queue

max.elopre — Tue, 09 Jun 2020 17:49:00 GMT

HI Mayank,

Can you try creating a new encrypted queue?

Best,

------------------------------
Max Elopre
Technical Consultant
Chicago IL
------------------------------

RE: Blue prism Data encryption for work queue

MayankGoyal2 — Tue, 09 Jun 2020 18:14:00 GMT

@max.elopre - Tried creating a new queue as well and added one row in queue, still Item Key value reflects as earlier. No sure how that checkbox 'Encrypt' works and what difference happens after selecting it.

------------------------------
Mayank Goyal
------------------------------

RE: Blue prism Data encryption for work queue

MayankGoyal2 — Wed, 10 Jun 2020 16:38:00 GMT

@max.elopre - Any inputs on above?

------------------------------
Mayank Goyal
------------------------------

RE: Blue prism Data encryption for work queue

max.elopre — Wed, 10 Jun 2020 18:53:00 GMT

Hi Mayank,

Make sure to follow the instructions in this link:
https://bpdocs.blueprism.com/bp-6-8/en-us/helpEncryption.htm

Try the option of storing the key in the database for now as there's an extra step in storing the key in the App server. Check the attached screenshot on how it should look like without the suffix "-None".

Best,

------------------------------
Max Elopre
Technical Consultant
Chicago IL
------------------------------

RE: Blue prism Data encryption for work queue

MayankGoyal2 — Mon, 15 Jun 2020 23:46:00 GMT

@max.elopre - Thanks a lot for your response. My encryption scheme is same as shared in your screenshot. The none suffix is automatically coming when adding WQ and have no option to edit that dropdown.

------------------------------
Mayank Goyal
------------------------------

RE: Blue prism Data encryption for work queue

max.elopre — Tue, 16 Jun 2020 00:02:00 GMT

Hi Mayank,

Am not getting the none suffix on mine after I created a new queue:

------------------------------
Max Elopre
Technical Consultant
Chicago IL
------------------------------

RE: Blue prism Data encryption for work queue

MayankGoyal2 — Tue, 16 Jun 2020 00:11:00 GMT

@max.elopre - Any suggestions on how to get that none removed, it is displaying on it own and i am not able to find any option to remove it.

------------------------------
Mayank Goyal
------------------------------

RE: Blue prism Data encryption for work queue

max.elopre — Wed, 17 Jun 2020 21:43:00 GMT

Hi Mayank,

Since I can't replicate your issue, I don't have anymore suggestion to add except reinstall BP and/or open a support ticket.

------------------------------
Max Elopre
Technical Consultant
Chicago IL
------------------------------

RE: Blue prism Data encryption for work queue

harshilcibc — Thu, 24 Feb 2022 18:05:00 GMT

Hi Mayank,

Hope I am not too late to respond and you got the answer already. But just for others to get idea I will post my response.

The queue encryption encrypts data at Database level. From Blue Prism queue you can still see the data as-is. To mask data with encryption, you will have to use internal encryption at object/process level before passing to queue and apply decryption again while reading queue.

The encryption checkbox on queue ONLY encrypts "data" column at database level.

Hope this explains.

------------------------------
Harshil Mehta
------------------------------