Account storage

Administrators can configure account storage for the system and store asset account credentials in an external system. The following account storage types are currently supported:

• HashiCorp Vault
• Microsoft Azure Key Vault
• Amazon Web Services Secrets Manager

Enable account storage

Using HashiCorp Vault

Please refer to and modify the following configuration:

• VAULT_ENABLED
• VAULT_BACKEND
• VAULT_HCP_HOST
• VAULT_HCP_TOKEN
• VAULT_HCP_MOUNT_POINT

Using Microsoft Azure Key Vault

Please refer to and modify the following configuration:

• VAULT_ENABLED
• VAULT_BACKEND
• VAULT_AZURE_HOST
• VAULT_AZURE_CLIENT_ID
• VAULT_AZURE_CLIENT_SECRET
• VAULT_AZURE_TENANT_ID

Using Amazon Web Services Secrets Manager

Please refer to and modify the following configuration:

• VAULT_ENABLED
• VAULT_BACKEND
• VAULT_AWS_REGION_NAME
• VAULT_AWS_ACCESS_KEY_ID
• VAULT_AWS_ACCESS_SECRET_KEY

Set the maximum number of account secret records

Administrators can set the maximum number of account secret records stored in the external vault system to avoid excessive storage usage.

1.

In the right area of the top navigation bar, click .

2.

In the left menu, click Features.

3.

On the right page, click Account storage tab.

4.

In the Record limit field, type the maximum number of account secret records to be stored in the external vault system.

5.

Click Submit.

Synchronize account secrets to external vault

After enabling account storage, administrators need to manually sync existing account secrets stored in JumpServer's local database to the external vault system.

1.

In the right area of the top navigation bar, click .

2.

In the left menu, click Features.

3.

On the right page, click Account storage tab.

4.

Click Sync.