Generating Secure Properties in Mule 4

Secure Property Placeholder is an essential standard for keeping sensitive data like User ID and Password secure (encrypted/cypher-text) in the Property file. Securing properties is one of the crucial elements in every Mule project. MuleSoft has introduced a Secure properties generator with a point and click environment that saves time and effort in specific scenarios.

This blog will explore both traditional methods — using jar — and modern methods — using secure property generator — of generating secure properties in Mule 4.

Method 1: Using Jar

1. Create a simple Properties Config file that will be used as an input file.

File Name: name-db.yaml

screenshot of db file name

2. We need to add the “Mule Secure Configuration” module now. It is not available in Anypoint studio by default. We need to add it from any point exchange. Click on the “Search in exchange” button in the Mule palette on the right side.

search exchange mule palette

Then search for “Secure” and select the “Mule Secure Configuration” module.

screenshot to add dependencies

Click on “Add” to add this dependency to our project.

3. Now, Select the Global elements tab in your XML and click on “Create”. Then select “Secure properties Config” as shown below:

new project screen

screenshot to choose a global type

Now Configure Secure Properties Config as shown below:

secure configure properties for file, key, and encryption

4. Now we have to generate a db-secure-dev.yaml file with encrypted property values ​​using the jar file. This jar can be downloaded from the documentation page of MuleSoft.

how to encrypt properties using the secure properties tool

We can use the following command:

Open CMD and run these commands by adding the encryption and decryption information.

java -jar secure-properties-tool.jar file <encrypt|decrypt> <algorithm> <mode> <key> <input file> <output file>

java -jar secure-properties-tool.jar file encrypt Blowfish CBC abcdefghijklmnop db-dev.yaml  + db-secure-dev.yaml

You can change the KEY according to your requirements.

screenshot of key change

Copy the generated db-secure-dev.yaml into src/main/resources.

Now, edit the Database Config as shown below:

edited database config with host, port, user, password, and database

Run the application and observe if it still works the same.

<?xml version="1.0" encoding="UTF-8"?>

<mule xmlns:secure-properties="" xmlns:ee=""
    xmlns:http="" xmlns="" xmlns:doc="" xmlns:xsi="" xsi:schemaLocation="">
    <configuration-properties doc:name="Configuration properties" doc:id="939739f1-02cc-4494-9174-e1bac975c70a" file="name-db.yaml" />
    <db:config name="Database_Config" doc:name="Database Config" doc:id="7ca8be2a-b438-497f-9490-67180ca2b9c7" >
        <db:my-sql-connection host="${}" port="${secure::db.port}" user="${secure::db.username}" database="${secure::db.dbname}" password="${secure::db.password}"/>
    <secure-properties:config name="Secure_Properties_Config" doc:name="Secure Properties Config" doc:id="2de5364a-c147-4269-adfb-e3fa528c8e35" file="db-secure-dev.yaml" key="abcdefghijklmnop" >
        <secure-properties:encrypt algorithm="Blowfish" />

Method 2: Securing Properties Using Secure Properties Generator

MuleSoft has optimized the complete process by providing an online secure properties generator that gives developers ease of securing properties. MuleSoft developers can now secure the properties in a point and click environment eliminating the command line interface.

The secure properties generator gives us an option of directly encrypting our values ​​without creating an input file. However, we can secure our properties using input files as well.

1. Visit the MuleSoft secure properties generator.

screenshot of mulesoft generator homepage

2. Provide the following configurations for operation, algorithm, state, and special key:

operation to encrypt or decrypt

dropdown choices for algorithm

dropdown choices for state

example key screenshot

Reminders: While choosing the AES algorithm, you have to provide a key of length 16. While choosing the Blowfish algorithm, you have to provide a key of length 15.

3. Fill in the value you want to encrypt.

example value to encrypt

4. Click on Generate to get the required result.

result of encryption from generator

You can also provide the encrypted result along with the key (previously used for encryption) to get the original value.

original value from generator

Securing properties is one of the essential elements in every Mule project, and MuleSoft has made this process far easier for a developer by introducing Secure Properties Generator.


Leave a Comment