Creating and Managing Static Secret Templates

You can create static secret templates so that the secrets can be created based on these templates. Secrets Manager comes with a few predefined secret templates, for example, GenericWebApp, OracleDB etc..

Adding a secret template

1. Log in to Britive.

2. Click on Admin->Secret Management->Secret Templates. A list of all secret templates is displayed.

3. Click the Add Secret Template button to create a new secret template.

4. Enter the following on the Add Secret Template page:

   1. Enter the Secret Template Name.

   2. Enter Description (Optional).

   3. Enter Secret Rotation Interval (Days). This is required only if the secret template has a password-type field. A password needs to be rotated within the user-defined number of days. The maximum allowed value is up to the value configured in the Britive vault details. For more information, see Creating a Britive Vault.

   4. Select the Password Policy. This is required only if the secret template has a password-type field. If you do not want to use a password field, select None from the drop-down list.

   5. Enter Password Repetition Limit. This is required only if the secret template has a password-type field.

   6. Click Add Field to add a new field to a template:

      1. Enter Field Name.

      2. Enter Description (Optional).

      3. Select the Field Type:

         • Single Line (250 characters) or Multi Line (5000 characters)

         • Password (it is a mandatory field and is masked on screen)

         • File (400 kb) 

         • OTP Seed: This is used to generate OTP for MFA authentication. Every secret template can have only one OTP Seed. For more information, see OTP Generation. File and OTP Seed are mutually exclusive. You can select only one of them.

         • Recovery Keys: Recovery keys are only visible to administrators when they are part of a secret. Non-admin users, even with permissions to that secret, do not see the recovery keys.

         • Resource: Select the resource, which is scanned after account discovery configuration and scanning of resources. 

           • Discoverable: If enabled, a user can search for a resource that is enabled for rotation and select among those, and that becomes the value of a particular secret field, a resource name.

         • Account: All accounts of the selected resource are displayed here. The secret is mapped to the resource, and the resource is in the account. Resource and account fields must be added together.

           • Allow Dual Values: If enabled, the primary and secondary accounts are rotated. This field is applicable only for Resource and Password fields. 

           • Discoverable:  

      4. Select Yes in Is it a mandatory field? if the above selected field needs to be mandatory.

      5. Select Yes in The field needs to be masked on screen? if the above selected field needs to be masked on screen.

      6. Click Add to add this field.

5. Click Save to save a secret template.

Managing Static Secret Templates

You can manage each static secret template by editing/cloning/deleting it.

1. Log in to Britive.

2. Click on Admin->Secret Management->Static Secret Templates.

3. Select the secret template and select any of the following actions:

   • Manage template: You can edit, clone, or delete a static secret template.

   • Clone template: You can clone an existing static secret template and refine the required fields as per your requirement.

   • Delete template: You can delete a password policy.