Artifactory Master Key

Description

General

• Documentation: https://jfrog.com/help/r/jfrog-installation-setup-documentation/master-key
• Summary: The master.key is an AES secret key (128 or 256 bit), introduced in Artifactory 5.7. The master.key file is automatically generated during the initial start-up of Artifactory. It can optionally be generated manually. This key should be placed at $ARTIFACTORY_HOME/etc/security/master.key before starting Artifactory the first time. It is needed to connect a node to a High Availability cluster of Artifactory, and it's also used to encrypt all configuration files that are saved in the DB.
• IPs allowlist: This feature is not relevant for this service.
• Scopes: This feature is not relevant for this service.

Revoke the secret

See the procedure to reset the master key here.

Check for suspicious activity

All access logs are stored and accessible through the administration module under Artifactory|System Logs. More information on this can be found in the documentation.

Details for Artifactory master key

• Family: cryptographic_key

• Category: package_registry

• Company: JFrog

• High recall: False

• Validity check available: False

• Analyzer available: False

• Minimum number of matches: 1

• Occurrences found for one million commits: 0.001

• Prefixed: False

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - artifactory
    - jfrog
- type: ContentWhitelistPreValidator
  patterns:
    - master

Examples

- text: |
    // artifactory master key
    masterKey = 2672b66f91e12ff207d77cd34d94d997
  apikey: 2672b66f91e12ff207d77cd34d94d997