StrongDM Vault

This feature is part of the Enterprise plan. If it is not enabled for your organization, please contact StrongDM at the StrongDM Help Center.

This page only explains the StrongDM Vault secret store. For information on using StrongDM Vault to manage secrets, rotate them, or entitle them to users, see the StrongDM Vault page.

For organizations that require centralized storage of their credentials, and do not already use a secret store provider, StrongDM Vault has a built-in secret store option. It can be configured as a secret store in StrongDM and then used as an option for credential location when configuring resources. It can store passwords, certificates, and keys, based on what is necessary for access to each type of resource. Those credentials are securely encrypted and can be updated or removed as needed.

Creating a new StrongDM Vault secret store is as simple as going to Settings > Secrets Management > Secret Stores in the Admin UI, clicking Add secret store, naming the new store, and choosing the StrongDM Vault type.

To manage the credentials inside of a StrongDM Vault secret store, you must create and use one or more relevant secret engines. For more information on managing secrets with secret engines, see the StrongDM Vault main section.