# Handle Secret Zero Challenge using HashiCorp Vault Approle Authentication and Terraform (Trusted Entity)

**URL:** <https://discuss.hashicorp.com/t/handle-secret-zero-challenge-using-hashicorp-vault-approle-authentication-and-terraform-trusted-entity/70839>\
**Category:** Vault\
**Tags:** hcp-terraform, vault\
**Created:** [October 22, 2024, 11:00am UTC](https://discuss.hashicorp.com/t/handle-secret-zero-challenge-using-hashicorp-vault-approle-authentication-and-terraform-trusted-entity/70839 "2024-10-22T11:00:35Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![redz1029](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/redz1029/32/43495_2.png) [@redz1029](https://discuss.hashicorp.com/u/redz1029)\
**Post date:** [October 22, 2024, 11:00am UTC](https://discuss.hashicorp.com/t/handle-secret-zero-challenge-using-hashicorp-vault-approle-authentication-and-terraform-trusted-entity/70839/1 "2024-10-22T11:00:35Z")

</div>

So I’m trying to figure out how to properly hide my application secrets once deployed in production and found out about Secret Management System and settled with HashiCorp Vault. I am able to successfully hide secrets and retrieve them using [VaultSharp](https://github.com/rajanadar/VaultSharp). Now my problem is the so called Secret Zero Challenge. My implementation will be all on premise, thus AWS and the like are out of scope. And I think Terraform with the help of Vault Agent might do the job? There’s a sample code from [HashiCorp repo](https://github.com/hashicorp/vault-examples/blob/main/examples/auth-methods/approle/dotnet/Example.cs) but I have no idea and haven’t found any comprehensive guides online on how to setup the Trusted Orchestrator and response wrapping that was mentioned from the sample code.

I am hosting my vault server in an Ubuntu Server and plans to deploy the application in a separate VM.

Thank you in advance.