In WAS, the worklight_enc_password can be added in Servers > WebSphere application servers > server name (e.g. server1) > Java and Process Management > Process definition > Environment Entries.
The reason is that the variable is actually retrieved by System.getEnv("worklight_enc_password") in worklight library.
Hope this help to other people.