Your suggested change has been received. Thank you.

close
Thales Logo

All

  • All
  • CipherTrust Manager
  • CipherTrust Application Data Protection (CADP)
  • CipherTrust Application Key Management (CAKM)
  • CipherTrust Batch Data Transformation (BDT)
  • CipherTrust Cloud Key Management (CCKM)
  • CipherTrust Data Discovery and Classification (DDC)
  • CipherTrust Data Protection Gateway (DPG)
  • CipherTrust Database Protection (CDP)
  • CipherTrust Intelligent Protection (CIP)
  • CipherTrust Integrations
  • CipherTrust Migrations
  • CipherTrust RESTful Data Protection (CRDP)
  • CipherTrust Transparent Encryption (CTE)
  • CipherTrust Transparent Encryption Userspace (CTE-U)
  • CipherTrust Secrets Management (CSM)
  • CipherTrust Vaulted Tokenization (CTE-V)
  • CipherTrust Vaultless Tokenization (CT-VL)
  • CTE-Linux
  • CTE-Windows
  • CTE-AIX
  • CTE-K8s
  • CTE-U
  • Data Protection on Demand
  • Luna Cloud HSM
  • Luna Network HSM
  • Luna PCIe HSM
  • Luna USB HSM
  • OneWelcome Identity Platform
  • ProtectApp LUKS
  • ProtectServer 2 HSM
  • ProtectServer 3 HSM
  • SafeNet Trusted Access (STA)
  • SafeNet MobilePASS+
  • SafeNet MobilePASS+ for Android
  • SafeNet MobilePASS+ for Chrome
  • SafeNet MobilePASS+ for macOS
  • SafeNet MobilePASS+ for iOS
  • SafeNet MobilePASS+ for WatchOS
  • SafeNet MobilePASS+ for Widows
  • SafeNet Synchronization Agent
  • SafeNet Logging Agent
  • SafeNet Agent for FreeRADIUS
  • SafeNet Agent for NPS
  • SafeNet Agent for Windows Logon
  • SafeNet Authentication Service Private Cloud Edition (SAS PCE)
  • SafeNet Remote Logging Agent
  • SafeNet Keycloak Agent
  • SafeNet IDPrime Virtual (IDPV)
  • SafeNet FIDO Key Manager
  • SafeNet FIDO Key Manager for Android
  • SafeNet FIDO Key Manager for iOS
  • SafeNet FIDO Key Manager for Windows
back

CipherTrust Manager Administration

Secrets Management

search

Please Note:

You are not viewing the most recent version of this page. 2.19 is the latest version available.

printsuggest an edit

Secrets Management

copy link to clipboardksctl secrets create

In the secrets create API, a new parameter passwordConfig is added with the option passwordconfig, which is of type "json". With this option, the password information is passed via file as shown below:

ksctl secrets create --name <name> --data-type "password" --passwordconfig <path of the json file>

passwordconfig.json sample

{
  "passwordLength": 8,
  "lowercaseCount": 1,
  "uppercaseCount": 1,
  "symbolsCount": 1,
  "digitsCount": 1
}

Note

  • Material is a mandatory field for:

    • all the non-licensed users.

    • the licensed users for all types other than "password".

  • passwordconfig is applicable only for the licensed users and type "password".

copy link to clipboardksctl secrets list

The secrets list API adds a new filter version.

ksctl secrets list --secretversion 2

copy link to clipboardksctl secrets version

The secrets version API creates a new version of the secret.

ksctl secrets version--name <name>

ksctl secrets version --name <key-name> --secretmaterial <secret-material>

Note

  • Material is a mandatory field for:

    • all the non-licensed users.

    • the licensed users for all types other than "password".

  • If the secret password is created using password config, the same config will be used to create a new version.

  • If the secret password is created using material, the user needs to provide a new material to create a new version.

copy link to clipboardksctl secrets list version

The secrets list version API lists all the versions of an existing secret.

ksctl secrets listversion--name <name>

On this page