Credential setup

Credentials are DPAPI-encrypted on Windows — decryptable only by the same Windows user account that created them.

Run the setup script

cd src
.\setup_credentials.ps1

The script prompts for 4 credential sets in order:

Prompt	What to enter	Files created
CRED_NETWORK_1	Username + password	network_1.txt, network_1_pwd.txt
CRED_NETWORK_2	Username + password	network_2.txt, network_2_pwd.txt
CRED_NETWORK_3	Username + password (first password)	network_3.txt, network_3_pwd.txt
CRED_NETWORK_4	Password only — inherits username from network_3	network_4_pwd.txt

Netpilot tries each credential set in order until one succeeds. Missing credential files are silently skipped.

Credential files are stored in the path set by secrets_dir_windows in config.yaml (default: D:\Prod_Automation\env\prod\secrets_v3).

Caution

Always run setup_credentials.ps1 as the same Windows user that runs Netpilot. DPAPI files created by another user will silently fail to decrypt.

Linux / environment variable override

Bash

export CRED_NETWORK_1="username"
export CRED_NETWORK_1_PWD="password"
export CRED_NETWORK_2="username2"
export CRED_NETWORK_2_PWD="password2"

config.yaml path

paths:
  secrets_dir_linux: "/opt/automation/secrets"