How to decrypt weblogic password

Once one of the primary DBAs went out for a vacation and the EBS 12.2 application that he used to manage had to be shut down for rebooting the underlying server. But we had no weblogic password to gracefully stop the application.

If you face similar situation, you can follow below steps to decrypt the weblogic password.

1) Take the adminserver boot.properties details

[applmgr@host1 security]$ cat $EBS_DOMAIN_HOME/servers/AdminServer/security/boot.properties
#Sun May 08 17:51:57 EDT 2016
password={AES}RL4vuk2Y1rreNBi0EmKNt0x8zY10ckmKxmv+j64CGak\=
username={AES}YOyAsoH6TA9BvK2qxjayQh3NvkQ4W3/3pygLNc4vWUM\=


2) create decrypt.py file in


[applmgr@host1 security]$ cd $EBS_DOMAIN_HOME/security
[applmgr@host1 security]$ cat decrypt.py
from weblogic.security.internal import *
from weblogic.security.internal.encryption import *
encryptionService = SerializedSystemIni.getEncryptionService(“.”)
clearOrEncryptService = ClearOrEncryptedService(encryptionService)

# Take encrypt password from user
pwd = raw_input(“Paste encrypted password ({AES}fk9EK…): “)

# Delete unnecessary escape characters
preppwd = pwd.replace(“\\”, “”)

# Display password
print “Decrypted string is: ” + clearOrEncryptService.decrypt(preppwd)

[applmgr@host1 security]$ pwd
/erppwrc1/erpapp/fs2/FMW_Home/user_projects/domains/EBS_domain_erppwrc1/security

3) source the   setDomainEnv.sh

[applmgr@host1 security]$ cd $EBS_DOMAIN_HOME/bin
[applmgr@host1 bin]$ ls -ltr
total 56
drwxr-x— 2 applmgr oinstall  4096 May  7 15:29 service_migration
drwxr-x— 2 applmgr oinstall  4096 May  7 15:29 server_migration
drwxr-x— 2 applmgr oinstall  4096 May  7 15:29 nodemanager
-rwxr-x— 1 applmgr oinstall  2010 May  7 15:29 secureWebLogic.sh
-rwxr-x— 1 applmgr oinstall  2003 May  7 15:29 stopWebLogic.sh
-rwxr-x— 1 applmgr oinstall  2473 May  7 15:29 stopManagedWebLogic.sh
-rwxr-x— 1 applmgr oinstall  5704 May  7 15:29 startWebLogic.sh
-rwxr-x— 1 applmgr oinstall  3251 May  7 15:29 startManagedWebLogic.sh
-rwxr-x— 1 applmgr oinstall 17349 May  7 15:29 setDomainEnv.sh
[applmgr@host1 bin]$. ./setDomainEnv.sh


4)run the decrypt password script


[applmgr@host1 security]$ cd $EBS_DOMAIN_HOME/security
[applmgr@host1 security]$ ls -ltr
total 40
-rw-r—– 1 applmgr oinstall   486 May  7 15:29 decrypt.py
-rw-r—– 1 applmgr oinstall 22654 May  7 15:29 XACMLRoleMapperInit.ldift
-rw-r—– 1 applmgr oinstall    64 May  7 15:29 SerializedSystemIni.dat
-rw-r—– 1 applmgr oinstall  2398 May  7 15:29 DefaultRoleMapperInit.ldift
-rw-r—– 1 applmgr oinstall  3301 May  8 17:50 DefaultAuthenticatorInit.ldift
[applmgr@host1 security]$

[applmgr@host1 security]$ java weblogic.WLST decrypt.py

Initializing WebLogic Scripting Tool (WLST) …

Welcome to WebLogic Server Administration Scripting Shell

Type help() for help on available commands

Paste encrypted password ({AES}fk9EK…): {AES}RL4vuk2Y1rreNBi0EmKNt0x8zY10ckmKxmv+j64CGak\=
Decrypted string is: weblogic123