Manually encrypt properties
You can encrypt specific keys in Vault using the $SECRET syntax. However, you should use automatic property encryption wherever possible.
Encrypt adapter properties
Create secret in Vault
Create a path and key name in Vault for the item. Use a path and key name that clearly relates to the target item.
Enable Advanced View
Click the Advanced View toggle to see the JSON configuration, which may be easier to edit.
Replace value with reference
Remove the existing value and replace it with the Vault reference:
For example: "$SECRET_default_password $KEY_key" evaluates to "password".
Note: Include a space before $KEY_.
Encrypt integration properties
Create secret in Vault
Create a path and key name in Vault for the item. Use a path and key name that clearly relates to the target item.
Open integration configuration
Go to Admin Essentials, click Integrations, and select an integration.
Encrypt profile properties
Create secret in Vault
Create a path and key name in Vault for the item. Use a path and key name that clearly relates to the target item.
Open profile configuration
Go to Admin Essentials, click Profiles, and select the currently running profile.
Encrypt properties.json values
Create secret in Vault
Create a path and key name in Vault for the item. Use a path and key name that clearly relates to the target item.
Open properties.json
Open the properties.json file and select a property to encrypt, such as "mongoProps.credentials.passwd".
You cannot encrypt any vaultProps values within properties.json.
