topic encrypt credentials to create datasource - PowerShell in Developer

encrypt credentials to create datasource - PowerShell

Anonymous — Wed, 16 Feb 2022 12:37:10 GMT

I'm trying to automate gateway data source management using PowerShell. First I need to encrypt credentials. Here is my PowerShell script to do this;

$segmentLength = 85 $encryptedLength = 128 $plaintTxt = '{"credentialData":[{"value":"'+$Username+'","name":"username"},{"value":"'+$Password+'","name":"password"}]}' $rsa = New-Object System.Security.Cryptography.RSACryptoServiceProvider ($encryptedLength * 8) $parameters = $rsa.ExportParameters($false) $parameters.Exponent = [System.Convert]::FromBase64String($GatewayExponent) $parameters.Modulus = [System.Convert]::FromBase64String($GatewayModulus) $rsa.ImportParameters($parameters) $plainTextArray = [System.Text.Encoding]::UTF8.GetBytes($plaintTxt) $hasIncompleteSegment = $plainTextArray.Length % $segmentLength -ne 0 $segmentNumber = If (-not $hasIncompleteSegment) {[int]($plainTextArray.Length / $segmentLength)} Else {[int]($plainTextArray.Length / $segmentLength) + 1} $encryptedData = [System.Byte[]]::CreateInstance([System.Byte],$segmentNumber * $encryptedLength) [int]$encryptedDataPosition = 0; For ($i=0; $i -lt $segmentNumber; $i++) { $lengthToCopy = If ($i -eq ($segmentNumber - 1) -and $hasIncompleteSegment) {$plainTextArray.Length % $segmentLength} Else {$segmentLength} $segment = [System.Byte[]]::CreateInstance([System.Byte],$lengthToCopy) [System.Array]::Copy($plainTextArray,$i*$segmentLength,$segment,0,$lengthToCopy) $segmentEncryptedResult = $rsa.Encrypt($segment, $true) [System.Array]::Copy($segmentEncryptedResult,0,$encryptedData,$encryptedDataPosition,$segmentEncryptedResult.Length) $encryptedDataPosition += $segmentEncryptedResult.Length; } return [System.Convert]::ToBase64String($encryptedData)

The solution described on this page stopped working - on the end of 2019

We're receiving the error that the
"Destination array was not long enough. Check destIndex and length, and the array's lower bounds"
on the line "Array.Copy(segmentEncryptedResult, 0, encryptedData, encryptedDataPosition, segmentEncryptedResult.Length);"

Do you have any fix writing in PowerShell? I have found sth in cs: microsoft/PowerBI-CSharp@83ba689

I will be apricated for any hint. Thanks!

Re: encrypt credentials to create datasource - PowerShell

V-lianl-msft — Mon, 21 Feb 2022 05:48:08 GMT

Hi @Anonymous ,

See if this sample will help you:

https://github.com/microsoft/PowerBI-Developer-Samples/blob/master/PowerShell%20Scripts/bindToGateway.ps1

Best Regards,
Liang
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Re: encrypt credentials to create datasource - PowerShell

Sébastien — Thu, 13 Apr 2023 13:32:50 GMT

Hello, here is my function, i found some code in the past available from internet.

In this function, it assumes that you already have imported the MicrosoftPowerBiMgmt modules

You need to download the Microsoft.PowerBI.Api.dll in order to call some code:

<# .Synopsis Encrypt the credentials against a DataGateway #> function Get-EncryptedCredentialDetails { param ( # The Username [parameter(Mandatory=$true)][string]$Username, # The Password [parameter(Mandatory=$true)][string]$Password, # The DataGateway ID [parameter(Mandatory=$true)][string]$DataGatewayId ) [System.Reflection.Assembly]::LoadFrom("$PSScriptRoot\Microsoft\Microsoft.PowerBI.Api.dll") $publicKey = (Invoke-PowerBIRestMethod -Url gateways/$($DataGatewayId) -Method Get | ConvertFrom-Json).publicKey $gatewayPublicKey = [Microsoft.PowerBI.Api.Models.GatewayPublicKey]::new($publicKey.exponent, $publicKey.modulus) $basicCredentials = [Microsoft.PowerBI.Api.Models.Credentials.BasicCredentials]::new($Username, $Password) $credentialsEncryptor = [Microsoft.PowerBI.Api.Extensions.AsymmetricKeyEncryptor]::new($gatewayPublicKey) [Microsoft.PowerBI.Api.Models.CredentialDetails]::new( $basicCredentials, [Microsoft.PowerBI.Api.Models.PrivacyLevel]::Organizational, [Microsoft.PowerBI.Api.Models.EncryptedConnection]::Encrypted, $credentialsEncryptor) }