An administrator creates a vault for every respective tenant to store and manage secrets. A vault is a container holding secrets and nodes. A node is a directory or a folder holding secrets.
Each secret is encrypted using a tenant-specific vault key and stored in the database. The vault key is periodically rotated and can also be rotated manually.
Creating a Vault
Only an administrator can create a vault, and it is a one-time activity.
Log in to Britive.
Click on System admin -> Secret Management.
Click on Britive Vault.
If the Britive Vault has been created already, the All Secrets page is displayed. The following operations are possible on a vault: Add Folder, Add Secret, Delete Folder, Add Policy. Click on the hanging menu in front of the vault to access these.
If the Britive Vault is not created already, click the Create Britive Vault button to start and follow the next steps.
Enter the following on the Create Vault page:
Enter Vault Name.
Enter Description (Optional).
Enter Version Limit: The vault allows storing the configured number of versions for each secret.
Enter Default Vault Key Rotation Interval (in days). The vault key is automatically rotated after this interval.
Enter Max Secret Rotation Interval (in days). This is the maximum permissible time interval for secret rotation. The default value is 60 days. The existing secret templates need to be updated manually to reflect this updated rotation interval.
Schedule Settings: These settings allow administrators to configure when a vault key or secrets are rotated. These values are configured per vault.
Default Vault Key Rotation Interval: Number of days after which the vault is rotated automatically.
Dynamic Secret Rotation Schedule: For automatically managed credentials, Britive checks and rotates them on a recurring schedule, as often as every 4 hours, using the time and interval you choose. For example, scan starting at 2:00pm and repeat after every 8 hours. For dynamic secret rotation to actually push new credentials to an external system, a rotation target and a rotation agent must be set up on the vault. If no agent is configured, Britive still rotates the secret internally but does not sync it to the target system.
Static Secret Reminders: Send reminders about expired secrets to all users configured at the vault level and/or individual users configured at the secret level at a specified interval and time. You can select OFF to stop getting secret reminders. The notification medium must be configured to receive these reminders.
Enter the following under the Notification Settings section:
Select the Notification Medium from the drop-down list. The notification mediums are created in Systems Administration->Global Settings->Notification Mediums. For more information, see Creating and Managing Notification Mediums. This notification medium is used to notify the user about the vault key rotation based on the specified rotation interval.
Select the users from the User List.
Select the tag list from the Tag List.
Click Create Vault.