StrongDM Vault

This feature is part of the Enterprise plan. If it is not enabled for your organization, please contact StrongDM at the StrongDM Help Center.

Overview

StrongDM comes with the built-in capability to store credentials alongside resource configuration, if no centralized storage and/or management is required for your organization's secrets.

For organizations that require centralized storage of their credentials, and do not already use a secret store provider, StrongDM has a built-in secret store called StrongDM Vault. It can be configured as a secret store in StrongDM and then used as an option for credential location when configuring resources. It can store passwords, certificates, and keys, based on what is necessary for access to each type of resource. Those credentials are securely encrypted and can be updated or removed as needed.

Creating a new StrongDM Vault is as simple as going to Settings > Secrets Management > Secret Stores in the Admin UI, clicking Add secret store, naming the new store, and choosing the StrongDM Vault type.

To manage the credentials inside of StrongDM Vault, you can create and use one or more relevant secret engines. For more information on managing secrets with secret engines, see the secrets management section.

Secrets Management