With Cloud Manager three passwords can be encrypted:
SAP user
Message Broker user
Proxy
In the tab "Password" enter the access token and the password to encrypt. Then press the "Encrypt Password" button.
The generated string ("Encrypted Password") needs to be entered in the property "passwordSecure" in an applicable section of the message broker configuration file (E4CwinService.exe.config).