OpenBao is central secrets and encryption management system. OpenBao stores secrets securely, provides identity-based access to the secrets, renews and rotates them, allows generating dynamic secrets, and provides detailed access and audit logs. OpenBao emerged as a fork of HashiCorp Vault and has added many highly-requested features.

Use Cases

Securosys Primus HSM and CloudHSM integrate with OpenBao for multiple use cases:

1. Auto-unseal: Auto-unseal your OpenBao instance with Primus HSM through PKCS#11 or REST. Remove the need for manual operator intervention due to manual unsealing.

2. Secrets engine: Access keys stored in Primus HSM through the familiar OpenBao API. Reuse existing infrastructure, existing identities, existing access control while upgrading key storage to HSM-backed hardware security.

These integration work through OpenBao plugins that are easy to install and configure. Please see the individual use cases for more information and installation guides.

References

• OpenBao website
• OpenBao plugin system