HashiCorp Vault Enterprise

HashiCorp Vault is a secrets management system. Vault allows you to securely store, manage, and grant access to secrets, such as API tokens, passwords, and private keys.

The Enterprise edition offers additional advanced security and disaster recovery features (compared to the Community Edition):

• Root key wrapping
• Automatic unsealing
• Seal wrapping
• Entropy augmentation

Securosys offers a PKCS#11-based integration with HashiCorp Vault Enterprise.

Use cases

• Unseal your Vault with the security of an HSM.
• Use multi-authorization workflows to ensure compliance with regulatory requirements.
• Use advanced HSM-backed Vault Enterprise features, such as entropy augmentation and seal wrapping.

Target Audience

This document is intended for Securosys Primus HSM or CloudHSM administrators and IT professionals in charge of the HashiCorp Vault Enterprise administration.

The installation of the Securosys Primus PKCS#11 Provider requires that you are already familiar with Windows or Linux administration.

For on-premise HSM deployed operation, administrative skills are required for Securosys Primus HSMs.

Getting started

• Follow the quickstart guide.
• For detailed installation and configuration instructions, see the installation guide.
• Learn about the Primus PKCS#11 API Provider.

You may also be interested in

• Integration with HashiCorp Vault Community Edition. To learn about the difference between HashiCorp Vault Community Edition and HashiCorp Vault Enterprise, see the HashiCorp documentation.
• Securosys Secrets Engine. A plugin for HashiCorp vault to generate, store, and use secrets directly in an HSM.