NiFi

The following are available options when targeting NiFi:

• -h,--help Show usage information (this message)

• -v,--verbose Sets verbose mode (default false)

• -n,--niFiProperties <file> The nifi.properties file containing unprotected config values (will be overwritten unless -o is specified)

• -o,--outputNiFiProperties <file> The destination nifi.properties file containing protected config values (will not modify input nifi.properties)

• -l,--loginIdentityProviders <file> The login-identity-providers.xml file containing unprotected config values (will be overwritten unless -i is specified)

• -i,--outputLoginIdentityProviders <file> The destination login-identity-providers.xml file containing protected config values (will not modify input login-identity-providers.xml)

• -a,--authorizers <file> The authorizers.xml file containing unprotected config values (will be overwritten unless -u is specified)

• -u,--outputAuthorizers <file> The destination authorizers.xml file containing protected config values (will not modify input authorizers.xml)

• -f,--flowXml <file> The flow.xml.gz file currently protected with old password (will be overwritten unless -g is specified)

• -g,--outputFlowXml <file> The destination flow.xml.gz file containing protected config values (will not modify input flow.xml.gz)

• -b,--bootstrapConf <file> The bootstrap.conf file to persist root key

• -k,--key <keyhex> The raw hexadecimal key to use to encrypt the sensitive properties

• -e,--oldKey <keyhex> The old raw hexadecimal key to use during key migration

• -p,--password <password> The password from which to derive the key to use to encrypt the sensitive properties

• -w,--oldPassword <password> The old password from which to derive the key during migration

• -r,--useRawKey If provided, the secure console will prompt for the raw key value in hexadecimal form

• -m,--migrate If provided, the nifi.properties and/or login-identity-providers.xml sensitive properties will be re-encrypted with a new key

• -x,--encryptFlowXmlOnly If provided, the properties in flow.xml.gz will be re-encrypted with a new key but the nifi.properties and/or login-identity-providers.xml files will not be modified

• -s,--propsKey <password|keyhex> The password or key to use to encrypt the sensitive processor properties in flow.xml.gz

• -A,--newFlowAlgorithm <algorithm> The algorithm to use to encrypt the sensitive processor properties in flow.xml.gz

• -P,--newFlowProvider <algorithm> The security provider to use to encrypt the sensitive processor properties in flow.xml.gz

• -c,--translateCli Translates the nifi.properties file to a format suitable for the NiFi CLI tool