Skip to content

External credential stores · 11.2

Use a secret from the external store

Once the store is connected, you can create credentials whose secret is retrieved from the store instead of being stored in TLSPilot.

  1. Open the Credentials Manager, for example by clicking the tile Credentials on the dashboard or with Manage… in a deployment, and click Add…
  2. Select the type of the credential, for example Windows WinRM (remote IIS / store), and enter a Display name and the User name.
  3. Secret source: Select the store, for example HashiCorp Vault KV, instead of TLSPilot Store.
  4. Vault path: Enter the path of the secret in the vault. If the secret is not stored in the field password, enter the field under Field (default password).
  5. Click Test resolve to check that TLSPilot can retrieve the secret.
  6. Click Save and close the Credentials Manager. If you opened it from a deployment, the credential is then selected automatically.

TLSPilot retrieves the secret from the store before each deployment, without storing it itself.