OnCommand Site Recovery Plug-in for Microsoft logs in to your storage controllers over HTTPS or HTTP with user names and passwords that you provide in the properties for each site recovery plug-in cluster resource.
By default, the plug-in connects to storage systems using HTTPS if it is available and HTTP if it is not. You can require the plug-in to use HTTPS by selecting the Require SSL option in the properties for each resource.
The plug-in stores passwords in the cluster database in a replicated registry hive. Passwords are encrypted using AES under a known hidden key and are never logged.