HashiCorp Vault Enterprise

HashiCorp Vault is a secrets management system. Vault allows you to securely store, manage, and grant access to secrets, such as API tokens, passwords, and private keys.

The Enterprise edition offers additional advanced security and disaster recovery features (compared to the Community Edition):

• Root key wrapping
• Automatic unsealing
• Seal wrapping
• Entropy augmentation

Securosys Primus HSM and CloudHSM can be used to automatically unseal HashiCorp Vault Enterprise instances via PKCS#11.

Getting started

Follow the installation guide to learn how to configure your HashiCorp Vault Enterprise instance with PKCS#11 auto-unsealing using a Securosys HSM.

You may also be interested in

• OpenBao: OpenBao is a fork of the HashiCorp Vault Community Edition, triggered by the licensing change from MPL to BUSL. OpenBao has added many features that in HashiCorp Vault are limited to the Enterprise edition, such as PKCS#11 auto-unseal, external keys, and namespaces.

• Securosys Secrets Engine: A plugin for HashiCorp Vault to generate, store, and use secrets directly in an HSM.