Connect an external credential store

First, you connect TLSPilot to the external store in the settings.

1. Click Settings… at the bottom right of the Desktop Admin console and open the tab Security.
2. Under External credential stores, select the store, for example HashiCorp Vault KV, and click Modify.

3. Vault base URL: Enter the address of the vault.

4. Token credential: Select the credential with the vault token. If none exists yet, click Manage, click Add… in the Credentials Manager, select the Credential type Credential store and the Store type HashiCorp Vault, enter a Display name and the token under Vault token. Click Save and close the Credentials Manager. The credential is then selected automatically.

5. Adjust Mount (default secret), Namespace (optional), KV version and Timeout (seconds) if required.
6. Click Test connection to check the settings. For CyberArk, Safe and Object in the store are used only by Test connection; each credential sets its own Safe and Object.
7. Click Save, switch on Enabled next to the store and click Save to apply the settings.