Integration > HashiCorp Vault (PKI, Transit, KV)
HashiCorp Vault (PKI, Transit, KV)
Industry-leading secrets management platform. CBOM Secure integrates with Vault 1.0+ across the PKI engine (issuance, CRL, root/intermediate CAs), Transit engine (encryption-as-a-service keys), and KV v1/v2 engines with namespace support.
- CBOM Secure
- CertSecure Manager
- CertSecure Manager (Discovery)
Use Cases
Inventory cryptographic material across HashiCorp Vault PKI engine, Transit engine, and KV v1/v2 engines.
PKI Engine Discovery
Inventories certificate issuance, CRL management, root/intermediate CAs, and issuer chains.
Transit Engine Keys
Discovers encryption-as-a-service keys: RSA, ECDSA, Ed25519, AES-GCM96, ChaCha20-Poly1305.
KV Secret Coverage
Covers KV v1 and v2 generic secret enumeration with full namespace support.
Manage the full certificate lifecycle for Vault-backed certificates entirely through CertSecure’s UI.
Agentless CA Connector
Integrates over Vault’s HTTP API with no separate connector service or ISO installer to deploy.
Role-Bound Templates
Binds CertSecure templates to Vault PKI roles so requesters don’t re-enter policy details on every enrollment.
Unattended Renewal
AppRole-based auth with periodic tokens lets Vault-issued certificates renew and sync automatically without manual token rotation.
Continuously discover and inventory every certificate in a Vault PKI mount without granting issue or revoke access.
Read-Only Visibility
Enumerates certificates via a list/read-only Vault policy, so security teams get full inventory without touching issuance permissions.
FQDN-Mapped Inventory
Resolves host-oriented fields to FQDNs so discovered certificates map to real endpoints rather than opaque serials.
Scheduled Scanning
One-time or recurring scans keep the inventory current as certificates are issued directly through Vault outside CertSecure.
Integrations and Resources
CBOM Secure
HashiCorp Vault (PKI, Transit, KV)
Secrets platform covering PKI, Transit encryption keys, and KV engines.
CertSecure Manager
HashiCorp Vault – Certificate Lifecycle Management
Issues, renews, and manages certificate lifecycles directly through HashiCorp Vault.
CertSecure Manager
HashiCorp Vault – Certificate Discovery
Scans HashiCorp Vault to discover and inventory existing certificates automatically.