Lowp tae content
Leid: SCO-ULSTER
Menu

Secret management

Haven

Available

Acause it hauds ither systems’ credentials, it fails steekit.

Veisit Haven Documentation Contack us

Haven hauds the database passwords, API keys, signing keys an certificates that sit behin a business. It issues them wi an expiry, scopes whit onie application may rax, an records aa requests afore it rins them. Its maister key niver touches disk. Efter a restart it bides steekit til eneuch o yer named hauders combine their shares. Onieyin wha haes the server disnae hae the secrets.

Wha it is for. Organisations that maun shaw whaur a credential cam frae, wha coud uise it an whan it wis taen back, an that want credentials tae expire on their ain.

Status
Available
Pairt o
Core platform
Product site
haven.rodmena.co.uk
Tags
Secret managementCreddentials gan oot o dateSplit-key unlockAudit trail

Whit it daes

  • Lockit till yer fowk open it

    The maister key is niver written tae disk. A stown server or a copied backup gies up nocht, acause efter a restart three o five share hauders maun combine their pairts afore oniecht can be read.

  • Separation atween teams

    A tenant haes its ain encryption key, policies an secrets, an the database enforces the boondary atween tenants. Acause the credential a caller presents fixes its tenant, a caller cannae ax tae be treated as anither.

  • Creddentials that expire on thair ain

    Haven issues a database password per process wi a lifetime attached. It is created whan axed fer an taen awa whan the time is up. A leaked password thon gate stops wirkin e'en gin naebody noticed the leak.

  • Applications haud na keys

    Haven encrypts an decrypts on their behalf, sae the key niver reaches the application. Rotatin a key leaes everythin already encrypted readable.

  • A private certificate authority

    Short-lived certificates are issued per service fer the domains its role allous it tae ax fer.

  • A audit trail that is checked

    Requests are recorded afore they rin, in a log whaur a hash chains a record tae the yin afore it. Verification walks the chain an recomputes it.

Documentation an access details is on the product site, haven.rodmena.co.uk. For a pilot, an integration or procurement questions, contact us.

Screens

Aw 6 screens o Haven