VAULT-EDI

The vault of EDI credentials — keys, certificates, passwords.

Definition

Vault offers secret engines (KV-v2 for generic keys, PKI to issue internal certificates, Database to generate ephemeral credentials, Transit for encryption operations) and auth methods (Kubernetes, AWS IAM, OIDC). Essential to store AS2 private keys and rotate expiring certificates.

Origin

Launched by HashiCorp in 2015 under MPL 2.0 license. Moved to BSL (Business Source License) in August 2023.

Example in context

An AS2 server reading its RSA-2048 private key from secret/edi/as2/private-key on startup.

Related terms

• Sealed Secrets — alternative for GitOps.