HashiCorp Vault Encryption

This guide explains how to install HashiCorp Vault ("Vault"). This application is used for encrypting and decrypting properties within the Itential Automation Platform (IAP). Install Vault To install Vault: You must be logged in as root...

Start Vault Server To configure HashiCorp Vault ("Vault") and start the Vault server: Navigate to /opt/vault . Figure 1: Change Directory Create a config file with an hcl file extension. Figure 2: Create Config File ...

The Vault Secrets Engine must be enabled and configured in advance before it can manage and share secrets securely. Vault KV-V2 Secrets Engine To enable the KV Secrets Engine for Vault: Run the command vault secrets enable kv-v2 to enabl...

To create a secret within Vault: Go to the Vault Server UI connected with IAP and login. Figure 1: Vault UI Click anywhere on the KV bar. Figure 2: Secrets Engine KV Bar Click the Create secret + button. Figure...

Overview For most sensitive properties within IAP, it is no longer necessary to manually create secrets within Vault to handle encryption. Instead, if Vault is configured, these propertes will be automatically encrypted. For example, to create a V...

It is still possible to have specific keys encrypted in Vault using the $SECRET syntax. Although this practice is an available option, property encryption should be performed automatically wherever possible. Adapters To set encryption for Adap...