Hi Jorg,
You should take a look at the odmdeploy.exe command.
There is a whole chapter describing what this command can do. I think it should cover what you need.
Best regards
Michel
Source: Re: Password encryption in DOC deployment descriptor