# HCP Vault **URL:** https://discuss.hashicorp.com/c/hcp/hcp-vault/56.md [Latest](https://discuss.hashicorp.com/latest.md) · [Categories](https://discuss.hashicorp.com/categories.md) · [Tags](https://discuss.hashicorp.com/tags.md) --- ## [About the HCP Vault category](https://discuss.hashicorp.com/t/about-the-hcp-vault-category/20059)
**Author:** [@joatmon08](https://discuss.hashicorp.com/u/joatmon08)\ **Replies:** 0
Information on HCP Vault use cases, Q&A, and best practices discussions. Please note that offerings may be in various release lifecycles. For support requests, please open a ticket. --- ## [Multi-Account Access for AWS Authentication](https://discuss.hashicorp.com/t/multi-account-access-for-aws-authentication/76820)
**Author:** [@daarush](https://discuss.hashicorp.com/u/daarush)\ **Replies:** 5\ **Last updated:** [November 25, 2025, 1:20am UTC](https://discuss.hashicorp.com/t/multi-account-access-for-aws-authentication/76820 "2025-11-25T01:20:28Z")
Hi, As the title says, I am trying to get multiple AWS accounts authenticated when they log in with their ec2 instance. Unfortunately, I can only get my account-ID to auth into HashiCorp Vault. I am not sure if this is … --- ## [404 Error while installing vault on RHEL server](https://discuss.hashicorp.com/t/404-error-while-installing-vault-on-rhel-server/74652)
**Author:** [@cmilea38](https://discuss.hashicorp.com/u/cmilea38)\ **Replies:** 1\ **Last updated:** [April 29, 2025, 5:30pm UTC](https://discuss.hashicorp.com/t/404-error-while-installing-vault-on-rhel-server/74652 "2025-04-29T17:30:33Z")
Hi, We are trying to install the latest vault for a RHEL server based on the documentation. \[Install | Vault | HashiCorp Developer\] (Install | Vault | HashiCorp Developer) Seems like the repo does not exist anymore. … --- ## [What is the cost of hiring an external HashiCorp Vault practitioner?](https://discuss.hashicorp.com/t/what-is-the-cost-of-hiring-an-external-hashicorp-vault-practitioner/72989)
**Author:** [@patrick.bob](https://discuss.hashicorp.com/u/patrick.bob)\ **Replies:** 1\ **Last updated:** [February 3, 2025, 1:02pm UTC](https://discuss.hashicorp.com/t/what-is-the-cost-of-hiring-an-external-hashicorp-vault-practitioner/72989 "2025-02-03T13:02:50Z")
My company is interested in knowing the estimated cost of hiring an external HashiCorp Vault Practitioner and the time of commitment for that specific price. We are interested in using HashiCorp Vault for SSL key managem… --- ## [What questions should I ask my client who is interested in using Hashicorp Vault for SSL Management?](https://discuss.hashicorp.com/t/what-questions-should-i-ask-my-client-who-is-interested-in-using-hashicorp-vault-for-ssl-management/72988)
**Author:** [@patrick.bob](https://discuss.hashicorp.com/u/patrick.bob)\ **Replies:** 0\ **Last updated:** [February 3, 2025, 5:57am UTC](https://discuss.hashicorp.com/t/what-questions-should-i-ask-my-client-who-is-interested-in-using-hashicorp-vault-for-ssl-management/72988 "2025-02-03T05:57:02Z")
I have a client who wants to use Hashicorp Vault for SSL key management, what should I ask the client to ensure that this product is a good fit for their needs? --- ## [HashiCorp Vault Secret barrier encryption: Is there plan to make it configurable?](https://discuss.hashicorp.com/t/hashicorp-vault-secret-barrier-encryption-is-there-plan-to-make-it-configurable/70793)
**Author:** [@sumanaps](https://discuss.hashicorp.com/u/sumanaps)\ **Replies:** 2\ **Last updated:** [October 30, 2024, 8:13am UTC](https://discuss.hashicorp.com/t/hashicorp-vault-secret-barrier-encryption-is-there-plan-to-make-it-configurable/70793 "2024-10-30T08:13:49Z")
HashiCorp Vault Secret barrier encryption is based on ‘256-bit Advanced Encryption Standard (AES)’. This seems to be fixed one as per current support. Is there plan to make this configurable, in case any other encryption… --- ## [Custom X-Vault wrap TTL with API does not work, but with cli it does](https://discuss.hashicorp.com/t/custom-x-vault-wrap-ttl-with-api-does-not-work-but-with-cli-it-does/69217)
**Author:** [@MrL21413](https://discuss.hashicorp.com/u/MrL21413)\ **Replies:** 5\ **Last updated:** [August 20, 2024, 12:48pm UTC](https://discuss.hashicorp.com/t/custom-x-vault-wrap-ttl-with-api-does-not-work-but-with-cli-it-does/69217 "2024-08-20T12:48:07Z")
I am using the Hashivault agent in a Windows environment. And I have set it up as a windows service. Other API calls and CLI commands are working. When i create a wrap request with some data in the request body i get th… --- ## [Error on vault look up from ansible playbook](https://discuss.hashicorp.com/t/error-on-vault-look-up-from-ansible-playbook/69134)
**Author:** [@Guneet-Bhatia2\_nbs](https://discuss.hashicorp.com/u/Guneet-Bhatia2_nbs)\ **Replies:** 2\ **Last updated:** [August 15, 2024, 1:25pm UTC](https://discuss.hashicorp.com/t/error-on-vault-look-up-from-ansible-playbook/69134 "2024-08-15T13:25:35Z")
Hi, I am doing lookup from ansible how ever I get below error. ‘community.hashi\_vault.hashi\_vault’. Error was a \, original message: ‘Response’ object is not subscriptable. ‘Response’ object is not su… --- ## [Question about the KMIP client API](https://discuss.hashicorp.com/t/question-about-the-kmip-client-api/37098)
**Author:** [@yyongycy](https://discuss.hashicorp.com/u/yyongycy)\ **Replies:** 2\ **Last updated:** [May 1, 2024, 4:36pm UTC](https://discuss.hashicorp.com/t/question-about-the-kmip-client-api/37098 "2024-05-01T16:36:51Z")
I am trying to implement a KMIP client, that can help our application integrating with Vault through KMIP, but I don’t have the API detail. Could anybody help me get the API definition so that I can get the related KMIP … --- ## [Error 500 when reading dynamic secrets database mongodb](https://discuss.hashicorp.com/t/error-500-when-reading-dynamic-secrets-database-mongodb/61605)
**Author:** [@chanzs](https://discuss.hashicorp.com/u/chanzs)\ **Replies:** 6\ **Last updated:** [March 2, 2024, 8:56pm UTC](https://discuss.hashicorp.com/t/error-500-when-reading-dynamic-secrets-database-mongodb/61605 "2024-03-02T20:56:49Z")
Was trying out the mongodb database secrets tutorial on the official hashicorp website. "Error reading mongodb/creds/tester: Error making API request. URL: GET http://127.0.0.1:8200/v1/mongodb/creds/tester Code: 500. … --- ## [HCP Vault - can't run operator init](https://discuss.hashicorp.com/t/hcp-vault-cant-run-operator-init/61575)
**Author:** [@nravic](https://discuss.hashicorp.com/u/nravic)\ **Replies:** 3\ **Last updated:** [January 10, 2024, 3:50pm UTC](https://discuss.hashicorp.com/t/hcp-vault-cant-run-operator-init/61575 "2024-01-10T15:50:26Z")
I’m trying to do the bare minimum here. I’ve initialized a developer cluster in HCP Vault. I used the simple template, with nothing initialized. During the setup process, I wasn’t given keys or anything. I’m trying to r… --- ## [Vault Secrets Operator. Permissions Denied on Vault login](https://discuss.hashicorp.com/t/vault-secrets-operator-permissions-denied-on-vault-login/60001)
**Author:** [@mailandre.pretorius](https://discuss.hashicorp.com/u/mailandre.pretorius)\ **Replies:** 10\ **Last updated:** [November 14, 2023, 5:08pm UTC](https://discuss.hashicorp.com/t/vault-secrets-operator-permissions-denied-on-vault-login/60001 "2023-11-14T17:08:28Z")
Hi guys, I am attempting to setup Vault Secrets Operator with Kubernetes auth with my External SASS Vault. VSO gets a 403 on login against my public vault. It is setup as follows: vault secrets enable -path=kvv2 kv-v2 v… --- ## [Set timeouts for hcp\_vault\_cluster\_admin\_token](https://discuss.hashicorp.com/t/set-timeouts-for-hcp-vault-cluster-admin-token/58165)
**Author:** [@dil-kpogany](https://discuss.hashicorp.com/u/dil-kpogany)\ **Replies:** 2\ **Last updated:** [November 10, 2023, 4:15pm UTC](https://discuss.hashicorp.com/t/set-timeouts-for-hcp-vault-cluster-admin-token/58165 "2023-11-10T16:15:48Z")
Hi, I’d like to configure the timeouts section for hcp\_vault\_cluster\_admin\_token , but the documentation is pretty poor on that. Could you please show me an example of those values being configured? Thanks! --- ## [Vault Error Error making API request Code: 403 Permission Denied](https://discuss.hashicorp.com/t/vault-error-error-making-api-request-code-403-permission-denied/58788)
**Author:** [@balhimanshu10](https://discuss.hashicorp.com/u/balhimanshu10)\ **Replies:** 1\ **Last updated:** [October 23, 2023, 2:32pm UTC](https://discuss.hashicorp.com/t/vault-error-error-making-api-request-code-403-permission-denied/58788 "2023-10-23T14:32:38Z")
Hello Team, I created new token for our terraform user (TF\_VAR\_VAULT\_ADMIN\_TOKEN) however, i am getting error Error looking up token: Error making API request. URL: GET https://abc.xyc.com:8200/v1/auth/token/lookup-se… --- ## [Unable to login to HCP Vault using k8s service account token](https://discuss.hashicorp.com/t/unable-to-login-to-hcp-vault-using-k8s-service-account-token/53648)
**Author:** [@Deidara](https://discuss.hashicorp.com/u/Deidara)\ **Replies:** 4\ **Last updated:** [May 11, 2023, 1:08pm UTC](https://discuss.hashicorp.com/t/unable-to-login-to-hcp-vault-using-k8s-service-account-token/53648 "2023-05-11T13:08:18Z")
I am trying to using k8s service account tokens to login into vault. I followed the configuration as mentioned in the documentation here I get following error \* error validating token: error verifying token signature: … --- ## [How to use vault write with a k8s sidecar](https://discuss.hashicorp.com/t/how-to-use-vault-write-with-a-k8s-sidecar/46556)
**Author:** [@tarang](https://discuss.hashicorp.com/u/tarang)\ **Replies:** 0\ **Last updated:** [November 6, 2022, 8:06pm UTC](https://discuss.hashicorp.com/t/how-to-use-vault-write-with-a-k8s-sidecar/46556 "2022-11-06T20:06:05Z")
Hi, With the aws secrets engine, its possible to request different types of credentials using ‘write’ vault write aws/roles/my-role \\ role\_arns=arn:aws:iam::000000000000:role/my-role \\ credential\_type=assumed\_r… --- ## [Deploy secretProviderClass using Terraform kubernetes\_manifest](https://discuss.hashicorp.com/t/deploy-secretproviderclass-using-terraform-kubernetes-manifest/54594)
**Author:** [@sforze](https://discuss.hashicorp.com/u/sforze)\ **Replies:** 0\ **Last updated:** [June 5, 2023, 4:29pm UTC](https://discuss.hashicorp.com/t/deploy-secretproviderclass-using-terraform-kubernetes-manifest/54594 "2023-06-05T16:29:54Z")
hi, facing difficulties sync vault secrets with kubernetes secret file. After setting up the secrets provider class volume and volume mounts I do not see the secrets being created when I deploy the application. kuberne… --- ## [Send or retrive audit logs to SIEM](https://discuss.hashicorp.com/t/send-or-retrive-audit-logs-to-siem/53862)
**Author:** [@gentoousers](https://discuss.hashicorp.com/u/gentoousers)\ **Replies:** 0\ **Last updated:** [May 17, 2023, 8:02am UTC](https://discuss.hashicorp.com/t/send-or-retrive-audit-logs-to-siem/53862 "2023-05-17T08:02:05Z")
Hello all, we are using Vault on HCP (I must say we are absolutely new in the plattform, specially in cloud environment), and we’d like to send (or retrieve) audit logs to a SIEM. We saw that logs to Splunk, Datadog and… --- ## [Is there any way to store LWE Keys in Vault?](https://discuss.hashicorp.com/t/is-there-any-way-to-store-lwe-keys-in-vault/52236)
**Author:** [@vinoth.sivakumar](https://discuss.hashicorp.com/u/vinoth.sivakumar)\ **Replies:** 2\ **Last updated:** [April 7, 2023, 7:33am UTC](https://discuss.hashicorp.com/t/is-there-any-way-to-store-lwe-keys-in-vault/52236 "2023-04-07T07:33:04Z")
Hi, Im using Microsoft Seal, in my applications, which creates LWE keys for encryption and decryption, I would like to know if Vault Support stores LWE Keys. --- ## [Create an orphan token with limited access](https://discuss.hashicorp.com/t/create-an-orphan-token-with-limited-access/48709)
**Author:** [@ShamaliiW](https://discuss.hashicorp.com/u/ShamaliiW)\ **Replies:** 0\ **Last updated:** [January 9, 2023, 8:46am UTC](https://discuss.hashicorp.com/t/create-an-orphan-token-with-limited-access/48709 "2023-01-09T08:46:09Z")
Hi Guys, I’m trying to create an Orphan token which limits access to only to a single namespace. So that I can maintain separate tokens for separate clients. Have tried with creating a separate policy which grants the a… --- ## [Existing Vault with KMS](https://discuss.hashicorp.com/t/existing-vault-with-kms/47302)
**Author:** [@shimster102](https://discuss.hashicorp.com/u/shimster102)\ **Replies:** 2\ **Last updated:** [November 30, 2022, 9:10pm UTC](https://discuss.hashicorp.com/t/existing-vault-with-kms/47302 "2022-11-30T21:10:09Z")
Hi everyone .I have a quick question. I currently have a running vault cluster in k8s and was looking into the auto unseal, but most of the examples use either the enterprise version or cloud keys. Am I able to configure… --- ## [Complete automation](https://discuss.hashicorp.com/t/complete-automation/46571)
**Author:** [@harish.nelapati](https://discuss.hashicorp.com/u/harish.nelapati)\ **Replies:** 2\ **Last updated:** [November 30, 2022, 3:22pm UTC](https://discuss.hashicorp.com/t/complete-automation/46571 "2022-11-30T15:22:25Z")
Hi i need complete automation of vault creation , Deploying our application and using them no manual intervention a complete SAAS offering --- ## [Vault Sealed error](https://discuss.hashicorp.com/t/vault-sealed-error/46956)
**Author:** [@mohana-intain](https://discuss.hashicorp.com/u/mohana-intain)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 3:19pm UTC](https://discuss.hashicorp.com/t/vault-sealed-error/46956 "2022-11-30T15:19:27Z")
The Vault version is 1.7.0. We are using a systemd file to create a vault docker application. We took backup of Master Key and Tokens. During restart of docker service (cmd sudo service docker restart ) our vault applica… --- ## [What is considered as "Client" if I have kubernetes app scaled to 20 pods?](https://discuss.hashicorp.com/t/what-is-considered-as-client-if-i-have-kubernetes-app-scaled-to-20-pods/43595)
**Author:** [@joe\_hisaishi](https://discuss.hashicorp.com/u/joe_hisaishi)\ **Replies:** 1\ **Last updated:** [August 25, 2022, 4:56pm UTC](https://discuss.hashicorp.com/t/what-is-considered-as-client-if-i-have-kubernetes-app-scaled-to-20-pods/43595 "2022-08-25T16:56:35Z")
Hello, What is considered as “Client” if I have kubernetes app scaled to 20 pods? Is it 1 Client or 20? Thanks, J. --- ## [Can we take backup or snapshot from version 1.1.0. we want to upgrade from 1.1.0 to 1.10.0 version](https://discuss.hashicorp.com/t/can-we-take-backup-or-snapshot-from-version-1-1-0-we-want-to-upgrade-from-1-1-0-to-1-10-0-version/41109)
**Author:** [@akavakon72](https://discuss.hashicorp.com/u/akavakon72)\ **Replies:** 0\ **Last updated:** [June 22, 2022, 6:50pm UTC](https://discuss.hashicorp.com/t/can-we-take-backup-or-snapshot-from-version-1-1-0-we-want-to-upgrade-from-1-1-0-to-1-10-0-version/41109 "2022-06-22T18:50:07Z")
Hi Team, We are planning to upgrade from 1.1.0 to 1.10.0 need help with backup and upgrade. Thank You, Ashutosh Kumar --- ## [Secure way to access Vault secrets from AWS Beanstalk without using AWS keys](https://discuss.hashicorp.com/t/secure-way-to-access-vault-secrets-from-aws-beanstalk-without-using-aws-keys/25339)
**Author:** [@walkover](https://discuss.hashicorp.com/u/walkover)\ **Replies:** 2\ **Last updated:** [April 23, 2022, 7:12am UTC](https://discuss.hashicorp.com/t/secure-way-to-access-vault-secrets-from-aws-beanstalk-without-using-aws-keys/25339 "2022-04-23T07:12:01Z")
We are looking into using Vault to store our database password and other secrets. Not looking into password rotation right now. The constraint being that I’m not allowed to generate any AWS access keys. We also wish to a… --- ## [Version of Vault running on HCP](https://discuss.hashicorp.com/t/version-of-vault-running-on-hcp/34727)
**Author:** [@hb9cwp](https://discuss.hashicorp.com/u/hb9cwp)\ **Replies:** 6\ **Last updated:** [April 23, 2022, 7:10am UTC](https://discuss.hashicorp.com/t/version-of-vault-running-on-hcp/34727 "2022-04-23T07:10:20Z")
The HCP Vault Development instance which I had started one month ago, initially ran v1.8.5, then was updated to v1.8.7 “automagically” in early January, and a week later to v1.9.2. Which was just in time to explore the … --- ## [Recommended end-user access patterns](https://discuss.hashicorp.com/t/recommended-end-user-access-patterns/38476)
**Author:** [@mcfearsome](https://discuss.hashicorp.com/u/mcfearsome)\ **Replies:** 5\ **Last updated:** [April 23, 2022, 7:06am UTC](https://discuss.hashicorp.com/t/recommended-end-user-access-patterns/38476 "2022-04-23T07:06:04Z")
I have just started experimenting with Vault and am currently using HCP as it seemed the easiest way to get started. While it’s just been me I’ve been using the public endpoint but that is something we want to disable an… --- ## [HCP Vault: New OIDC Provider's /.well-known/openid-configuration returns port :8202 instead of :8200](https://discuss.hashicorp.com/t/hcp-vault-new-oidc-providers-well-known-openid-configuration-returns-port-8202-instead-of-8200/34694)
**Author:** [@hb9cwp](https://discuss.hashicorp.com/u/hb9cwp)\ **Replies:** 2\ **Last updated:** [April 8, 2022, 10:23am UTC](https://discuss.hashicorp.com/t/hcp-vault-new-oidc-providers-well-known-openid-configuration-returns-port-8202-instead-of-8200/34694 "2022-04-08T10:23:07Z")
Hello, When I query the /.well-known/openid-configuration endpoint of the OpenID Connect ID Secrets Engine on my HCP Vault 1.9.2 one-node Development/Extra Small cluster over my private HVP to VPC subnet peering conneti… --- ## [HCP Vault and Nomad Tokens](https://discuss.hashicorp.com/t/hcp-vault-and-nomad-tokens/37287)
**Author:** [@ndobbs20](https://discuss.hashicorp.com/u/ndobbs20)\ **Replies:** 0\ **Last updated:** [March 19, 2022, 2:01pm UTC](https://discuss.hashicorp.com/t/hcp-vault-and-nomad-tokens/37287 "2022-03-19T14:01:11Z")
I’m running HCP Vault and Consul but my question is specifically with Vault and Nomad integration. I want to use Vault to generate Nomad tokens, I’m following the guide here: Generate Nomad Tokens with HashiCorp Vault |… [Next page](https://discuss.hashicorp.com/c/hcp/hcp-vault/56.md?page=1)