Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleCreate Vault and Keys

To create a Vault and define its custom keys to store and fetch passwords:

  1. Go to Develop > Services > Security Vault



  2. Click Create New.



  3. Type the name and description of the new Vault.


  4. You can change Vault Alias before you hit Save. Once saved, you cannot modify the field.

    Info
    titleNote

    The Vault Alias is a unique field.

  5. Type in a key and its value.

  6. Click Add to add a new Parameter.



  7. Click  to view the hidden values. Click  to mask the password. To delete a parameter, click  in front of it.



  8. Expand Advanced Properties to change the project and owner of this vault. Also provide permission of Read, Write, and Execute to Owner, Group, and Others. Click here for more information on how permissions work.
  9. Click Save.

Once you create a vault, click here to use it to secure your confidential information.

Expand
titleUsing Vault

Anchor
Using_Vault
Using_Vault

The URL we use in any application contains some confidential information like password which is passed as a plain text. To enhance the security, use vault to encrypt the password instead of providing the password as a plain text. Before using it in the URL, click here to create a new Vault.

After you have created a vault, write the following syntax in the URL of the JDBC drivers (given in the table below) replacing the confidential information:

{Vault.aliasName.key}

where,
Following an opening curly parentheses, 'Vault' is a keyword to be used every time (V in 'Vault' is UPPERCASE).
aliasName is the Vault Alias, where the parameter, which stores the confidential data, is defined.
key is the parameter which stores the confidential data.
Finally closed by a closing curly parentheses.
A period is used as a separator between Vault and aliasName; and aliasName and key.

Now if a REST Consumer Web Service is using vault for storing and fetching a password, we define the URL in the form:
http://server:host?username=<username>&password={Vault.aliasName.key}

For example-
http://192.168.1.195:8080?username=admin&password={Vault.safe.client_key}

...