Your suggested change has been received. Thank you.

close
Thales Logo

All

  • All
  • CipherTrust Manager
  • CipherTrust Application Data Protection (CADP)
  • CipherTrust Application Key Management (CAKM)
  • CipherTrust Batch Data Transformation (BDT)
  • CipherTrust Cloud Key Management (CCKM)
  • CipherTrust Data Discovery and Classification (DDC)
  • CipherTrust Data Protection Gateway (DPG)
  • CipherTrust Database Protection (CDP)
  • CipherTrust Intelligent Protection (CIP)
  • CipherTrust Integrations
  • CipherTrust Migrations
  • CipherTrust RESTful Data Protection (CRDP)
  • CipherTrust Transparent Encryption (CTE)
  • CipherTrust Transparent Encryption Userspace (CTE-U)
  • CipherTrust Secrets Management (CSM)
  • CipherTrust Vaulted Tokenization (CT-V)
  • CipherTrust Vaultless Tokenization (CT-VL)
  • CTE-Linux
  • CTE-Windows
  • CTE-AIX
  • CTE-K8s
  • CTE-U
  • Crypto Command Center
  • Data Protection on Demand
  • Luna Cloud HSM
  • Luna Network HSM
  • Luna PCIe HSM
  • Luna USB HSM
  • OneWelcome Identity Platform
  • ProtectApp LUKS
  • ProtectServer 2 HSM
  • ProtectServer 3 HSM
  • SafeNet Trusted Access (STA)
  • SafeNet MobilePASS+
  • SafeNet MobilePASS+ for Android
  • SafeNet MobilePASS+ for Chrome
  • SafeNet MobilePASS+ for macOS
  • SafeNet MobilePASS+ for iOS
  • SafeNet MobilePASS+ for WatchOS
  • SafeNet MobilePASS+ for Windows
  • SafeNet Synchronization Agent
  • SafeNet Logging Agent
  • SafeNet Agent for FreeRADIUS
  • SafeNet Agent for NPS
  • SafeNet Agent for Windows Logon
  • SafeNet Authentication Service Private Cloud Edition (SAS PCE)
  • SafeNet Remote Logging Agent
  • SafeNet Keycloak Agent
  • SafeNet IDPrime Virtual (IDPV)
  • SafeNet FIDO Key Manager
  • SafeNet FIDO Key Manager for Android
  • SafeNet FIDO Key Manager for iOS
  • SafeNet FIDO Key Manager for Windows
back

CipherTrust Manager Administration

Secrets Management

search

Please Note:

printsuggest an edit

Secrets Management

copy link to clipboardksctl secrets create

In the secrets create API, a new parameter passwordConfig is added with the option passwordconfig, which is of type "json". With this option, the password information is passed via file as shown below:

ksctl secrets create --name <name> --data-type "password" --passwordconfig <path of the json file>

passwordconfig.json sample

{
  "passwordLength": 8,
  "lowercaseCount": 1,
  "uppercaseCount": 1,
  "symbolsCount": 1,
  "digitsCount": 1
}

Note

  • Material is a mandatory field for:

    • all the non-licensed users.

    • the licensed users for all types other than "password".

  • passwordconfig is applicable only for the licensed users and type "password".

copy link to clipboardksctl secrets list

The secrets list API adds a new filter version.

ksctl secrets list --secretversion 2

copy link to clipboardksctl secrets version

The secrets version API creates a new version of the secret.

ksctl secrets version--name <name>

ksctl secrets version --name <key-name> --secretmaterial <secret-material>

Note

  • Material is a mandatory field for:

    • all the non-licensed users.

    • the licensed users for all types other than "password".

  • If the secret password is created using password config, the same config will be used to create a new version.

  • If the secret password is created using material, the user needs to provide a new material to create a new version.

copy link to clipboardksctl secrets list version

The secrets list version API lists all the versions of an existing secret.

ksctl secrets listversion--name <name>

On this page