param
Use the param command to define and manage user passwords and variables locally on dynamic agents and HCL Workload Automation Agents.
Authorization
To create, delete, or display variables or passwords, you must have Administrator or root user rights on the workstation that runs the agent or TWS_user rights on the agent.
Syntax
param -u | -V |
          {-c | -ec} [file.section.|file..|section.] variable [value] |
          [file.section.|file..|section.] variable |
          {-d | -fd} [file.section.|file..|section.] variable
                       
Arguments
- -u
- Displays command usage information and exits.
- -V
- Displays the command version and exits.
- -c | -ec
- Creates variable or password variable and defines its value value. The variable or password is placed in a namespace file that you can organize in one or more sections named section.If you do not provide a file name file, the variable or password is placed in default file jm_variables in path agent_installation_path\TWA\TWS\ITA\cpa\config\jm_variables_files (/TWA/TWS/ITA/cpa/config/jm_variables_files) on the dynamic agent. If you do not provide a section name section, the variable or password is placed in the main body of the file.Important: If you are defining a password, you must specify a section namedpasswordfor variable. This specifies that variable is a password.If you are creating a variable, variable is the variable name and value is its value. If you are creating a password, variable is the user name and value is its password. If you do not enter value within the arguments, the command requests interactively to enter a value. Argument -c creates the variable in clear form. Argument -ec creates the variable in encrypted form. Passwords are encrypted by default also if you use -c. 
- -d | -fd
- Deletes (-d) or forces deletion (-fd) of a file,
section, or variable (password). You can use the following wildcards: - *
- Replaces one or more alphanumeric characters.
- ?
- Replaces one alphanumeric character.
 With -d the command asks for confirmation before deleting. With -fd it deletes without asking confirmation. When you delete all the variables in a section, the section is removed from the file. When you delete all the sections and all the variables from a file, the file is removed. 
- file
- The name of the file used as a namespace for variable.
If you do not specify file, the command uses the default file jm_variables in path agent_installation_path\TWA\TWS\ITA\cpa\config\jm_variables_files (/TWA/TWS/ITA/cpa/config/jm_variables_files).All the variable namespaces go in path agent_installation_path\TWA\TWS\ITA\cpa\config\jm_variables_files (/TWA/TWS/ITA/cpa/config/jm_variables_files). 
- section
- The name of the section within file where variable is defined. When variable is used for a password, it must
be placed in a section named password. No section name is required to store variables.
- value
- The value for variable.
- variable
- Can be a variable name or a user identification. If it is used
for identification, it must be placed in a section named passwordwithin the namespace file.
Comments
param [file.section.|file..|section.] variableThe namespace files, including default jm_variables, have no extension.
Variable names are case sensitive.
On IBM i systems, if you use the QP2TERM
and the QSH shells, passwords are made visible during the creation
process with param and are displayed clearly in the
shell logs. To guarantee the obfuscation of a password, you need to
use the AIXTERM or XTERM shells.
Examples
param -c compassets.hardware.platform1 unixplatform1 with value unix in section hardware of the new or existing file
named compassets. The value is not encrypted.param -c compassets..platform1 unixplatform1 with value unix in the new or existing file named compassets. The
value is not encrypted.param -ec hardware.platform1 unixplatform1 with value unix in section hardware in the default file agent_installation_path\TWA\TWS\ITA\cpa\config\jm_variables_files\jm_variables. The value is encrypted.param -c compassets.password.jladams san07rewjladams with value san07rew in section password of the new or existing file
named compassets. Since jladams is
defined in section password, it is interpreted as
a username. The value san07rew is encrypted by default
since it is interpreted as a password.param *.*.platform1 platform1 in all its defined locations. That is:...\TWA\TWS\ITA\cpa\config\jm_variables_files\compassets.hardware.platform1=unix
...\TWA\TWS\ITA\cpa\config\jm_variables_files\compassets..platform1=unix
...\TWA\TWS\ITA\cpa\config\jm_variables_files\jm_variables.hardware.platform1=***param password.*adam*adam contained
in the password section of all files. In this case:...\TWA\TWS\ITA\cpa\config\jm_variables_files\compassets.password.jladams=********param -d compassets.password.jladams jladams.param -d compassets.password.* password and therefore removes this
section from file compassets.param -d compassets.*.* compassets and therefore removes the file.