Page 1 of 2

Visualizing encrypted audit data

Published: February 8, 2026 - 8:22 PM
by Kevin-LH76
Hello,

In the audit data for a workstation, I have the RustDesk password, which is encrypted.

In the value field, I have a string that starts with "BEGIN WAPT ENCRYPTION" followed by five values ​​which, if I understand correctly, are the encrypted passwords for each of the certificates present on the client (including mine).

If I click on "Decrypt data", nothing happens.

How can I display the encrypted password with my certificate?

Re: Visualizing encrypted audit data

Published: February 9, 2026 - 12:52 PM
by sfonteneau
Hello.

Normally, if your certificate is present on the machine, just restart a package audit and it should work.

Re: Visualizing encrypted audit data

Published: February 9, 2026 - 1:27 PM
by Kevin-LH76
Hello,

Thank you for your feedback.

My certificate is indeed present on the machine (visible in the inventory tab).

I restarted the package audit, but the Rustdesk password audit has not changed, and the decrypted action does nothing.

Re: Visualizing encrypted audit data

Published: February 9, 2026 - 1:35 PM
by sfonteneau
According to the package code: tis-rustdesk-config-template

The password is changed with each audit, so the Rustedesk password must have changed as well:

Code: Select all

def audit():
    rustdesk_id = run('"%s" --get-id' % RustDeskBin)
    if rustdesk_id.endswith('\n'):
        rustdesk_id = rustdesk_id.split('\n')[-2]

    alphabet = string.ascii_letters + string.digits
    rustdesk_pw = ''.join(secrets.choice(alphabet) for i in range(12))
    run('"%s" --password %s' % (RustDeskBin, rustdesk_pw))

    WAPT.write_audit_data_if_changed("rustdesk", 'rustdesk-id', rustdesk_id, max_count=365)
    WAPT.write_audit_data_if_changed("rustdesk", 'password_encryption', rsa_encrypted_data_str(rustdesk_pw, WAPT.public_certs_dir), max_count=365)
Have you run the audit of the tis-rustdesk-config package?

Re: Visualizing encrypted audit data

Published: February 9, 2026 - 3:10 PM
by Kevin-LH76
Hello,

Yes, the audit of the rustdesk-config package has started, the status is OK, and the date is correctly updated.

However, in the audit data, the value remains at 07/02.

Re: Visualizing encrypted audit data

Published: February 9, 2026 - 3:57 PM
by sfonteneau
That's strange, I just tested it here without any problems.

Is your certificate exactly the same as the one in the machine's SSL folder and the one in your console?

The date in the audit data doesn't change?

Perhaps you should force an inventory update?

Re: Visualizing encrypted audit data

Published: February 9, 2026 - 4:05 PM
by Kevin-LH76
Hello,

I confirm that the certificate is the same.

Indeed, the audit remains unchanged.

Re: Visualizing encrypted audit data

Published: February 9, 2026 - 4:37 PM
by sfonteneau
Kevin-LH76 wrote: Feb 9, 2026 - 4:05 PM Indeed, the audit remains unchanged
If the date The fact remains that the itinerary is not being sent.

No errors in the audit of the general package?

You can try the following on the machine:

wapt-get audit tis-rustdesk-config -f
wapt-get update-status

This will surely help to clarify things

Re: Visualizing encrypted audit data

Published: February 9, 2026 - 4:58 PM
by Kevin-LH76
Good morning,

No errors were found in the package audit

Code: Select all

Statut;Statut d'audit;Nom du paquet;Version;Date d'installation;Audité le;Prochain audit
OK;OK;tcfpkg-rustdesk-config;29;09/02/2026 13:23:43;09/02/2026 16:51:55;11/03/2026 16:51:55
No changes on the audit side

Code: Select all

id;Date;Section;Clé;Valeur;Date d'expiration;FQDN de la machine
1176;07/02/2026 18:09:48;rustdesk;rustdesk-id;
2531;07/02/2026 18:09:48;rustdesk;password_encryption;
no errors in the commands

Code: Select all

C:\Windows\System32>wapt-get audit XXX-rustdesk-config -f
Using config file: C:\Program Files (x86)\wapt\wapt-get.ini
Auditing XXX-rustdesk-config
XXX-rustdesk-config -> OK


C:\Windows\System32>wapt-get update-status
Using config file: C:\Program Files (x86)\wapt\wapt-get.ini
Updated host status correctly sent to server https://wapt.XX.XX

Re: Visualizing encrypted audit data

Published: February 9, 2026 - 5:37 PM
by sfonteneau
Just out of curiosity, if you delete the machine from wapt and then run `

wapt-get register`

does it work?

It could be a date issue in the inventory (a date in the future).