Create a credential for an external key vault connection - Create a credential for a selected external vault connection so that bots can retrieve the mapped secret from the external vault at run time.

Automation 360

Create a credential for a selected external vault connection so that bots can retrieve the mapped secret from the external vault at run time.

Before you begin

  • You must have the 'Manage my credentials and lockers' and 'Create standard attributes for a credential' permissions to create a credential and attributes.
  • The required secret, object, or credential entry exists in the external vault.

Procedure

  1. Log in to Control Room as a user with the required permissions.
  2. Navigate to Manage > External Vault.
  3. Select the Credentials tab on the top.
  4. Click Add Credential, Add or + icon to create a new credential.
  5. Enter the Credential name and a Description for your new credential. Description is an optional field.
    create credential
  6. Under Locker, select the locker to which this credential will be assigned.

    select-locker

    Note: If no locker is available and you want it to be added to a locker, you should create a new locker and then assign the credential. See Manage lockers for an external key vault connection.
  7. Enter the following to retrieve the credentials based on your external vault connection:
    Note: Select the Custom secret name or Custom object name check box to specify a name according to your own naming convention or use the default Automation 360 naming.
    Vault provider Details to enter
    AWS Secrets Manager Secret name
    CyberArk Password Vault Object name
    Azure Key Vault Secret name
    HashiCorp Vault Secret name
    ARCON Key Vault Username as defined in the secret, Server IP address, Target type, Open for hours, and Hostname (Optional).
    BeyondTrust Password Safe System name and Account name as it appears in BeyondTrust Password Safe.
    Delinea Secret Server Secret name
    Note: For CyberArk, optionally, you can add attributes and enter property set using CyberArk properties to use in your bot automation.

    The following examples show how to create property sets in different scenarios:

    • If you want to use a username in the format domain\username where the domain is stored in the CyberArk property called Address and the username is stored in the CyberArk property called UserName, then enter the property set in the format $$Address$$\$$UserName$$ in the credential attribute and use this attribute in your bot automation.
    • If you want to use a username in the format username@example.com where the username is stored in the CyberArk property called UserName and the address (example.com) is stored in the CyberArk property called Address, then enter the property set in the format $$UserName$$@$$Address$$ in the credential attribute and use this attribute in your bot automation.
  8. Click Validate and retrieve attributes.
  9. After validation, select the Attributes to be included in this credential.
  10. Click Create Credential.
    Note: If the email notification settings for A credential added to a locker are enabled, all the locker consumers will receive an email whenever credentials are added to a locker.