Navigation
Vault access. Public access is not open. This product is separate from initial Identity and Apparatus access.
Screenshots use fictional demonstration accounts. Your data and available actions may differ. Reviewed October 16, 2026.
Credential types
Store a TLS certificate bundle
Use TLS bundle when the record needs certificate chain, matching private key and optional ca bundle.
Create the record
- Open the intended folder and choose + New credential.
- Choose TLS bundle from Credential type.
- Enter a recognizable name. Load the certificate chain and select Use certificate chain. Load its private key and select Use private key. Add the CA bundle if needed. Check the parser and key-match result, subject, issuer and expiry before storing.
- Review the storage location, description and tags. Do not place secrets in those metadata fields.
- Select Store credential. An intermediate Use action only accepts that field; it does not save the record.
- Open the saved record and check the name, type and available connection summary.
Validation messages stay with the form so you can correct the input. Switching types changes which fields are required. Recheck the selected type and location before submitting.
Retrieve or maintain it
Copy private key returns the primary value through the audited lease flow. For a complete structured record, use the TypeScript client or CLI. Use the certificate and key from the same issuance. The console shows expiry warnings but does not renew the certificate. Retrieve the certificate chain and CA bundle through an authorized client.
Use the record’s Access tab for sharing, Activity for audit and leases, and Manage for rotation or archiving. A replacement requires the full typed record; existing secrets are not prefilled.
Screen reference
