Editing a Secret

We recommend that you set secrets at the box level to ensure that they automatically apply to all of the secrets that you add to that box.

  1. From the KeyControl Secrets Vault GUI, select Manage > Manage Boxes.

  2. On the Manage Boxes page, select the box where you want to modify a secret.

  3. On the Box page, in the Secrets region, select the secret that you want to modify.

  4. Click Edit.

  5. In the About tab of the Edit Secret window, you can modify the following: 

    Option Description

    Description

    The optional description of the secret.

    Expires

    Select one of the following: 

    • Use Box Setting—Accepts the global box value.

    • No Expiration—The secret does not expire.

    • Specific Date and Time—Allows you to set the specific date and time for the secret to expire.

  6. Click the Checkout Details tab.

  7. In the Checkout Details tab of the Edit Secret window, you can update the following: 

    Option Description

    Checkout Duration

    How long the secret is checked out. By default, the Use Box Setting option is selected.

    • Use Box Setting—Use the duration set when creating the box.

    • Duration—Enter a duration in days, minutes, or hours. This value will overwrite the box settings.

    Exclusive Checkout

    If enabled, then the secret checkout will be exclusive and only one user can check out the secret at a time. However, if the checkout duration has expired, then a new checkout will be allowed. By default the Use Box Setting option is selected.

    • Use Box Setting—Use the value that was set when creating the box.

    • Yes—If set to Yes, the secrets checkout will be exclusive.

    • No—If set to No, multiple users can checkout the secret at the same time.

  8. If you selected ESXi Hosts, click the Rotation Details tab.

  9. In the Rotation Details tab of the Edit Secret window, you can update the following: 

    Option Description

    Rotation Duration

    Sets the duration for this secret to be rotated. By default the Use Box Setting option is selected.

    • Use Box Setting—Use the duration set when creating the box.

    • Duration—Enter a duration in days, minutes, or hours. This value will overwrite the box settings.

    Rotate on Check In

    If enabled, the secret will automatically rotate when checked in. This requires that the checkout duration is set. By default the Use Box Setting option is selected.

    • Use Box Setting—Use the value that was set when creating the box.

    • Yes—If set to Yes, the secret will be rotated when it is checked in.

    • No—If set to No, the secret will not be rotated when it is checked in.

    Force Rotation

    If selected, this forces the rotation of all secrets in the box.

    • If Rotation Duration and Force Rotation are both checked, the secret will be rotated even if there are outstanding leases.

    • If Rotate on Check In and Force Rotation are both checked, the secret will rotate when the checkout expires.

    By default, the Use Box Setting option is selected.

    • Use Box Setting—Use the value that was set when creating the box.

    • Yes—If set to Yes, this forces the secret to rotate.

    • No—If set to No, the secret will not rotate.

  10. Click Save to save your changes but remain in the wizard, Save and Close to save your changes and close the wizard, or Cancel to close the wizard without saving.