topic Re: Credential vault data traffic to Robots in Synthetic Monitoring

Credential vault data traffic to Robots

alexander_nied1 — Tue, 25 Feb 2020 12:58:42 GMT

Hello everyone,

this blog post shows the use of the new credential vault. Can anyone tell me how the information is transferred? So how do the credentials get from the vault to the private and public servers where the robots run their tests? And how they are stored there?

Thanks a lot, Alexander

Re: Credential vault data traffic to Robots

ChadTurner — Tue, 25 Feb 2020 16:39:51 GMT

Safely store your credentials in a central place, automatically update monitors, and more!

First and foremost, the Dynatrace Synthetic credential vault provides a secure store for your credentials.

The sensitive information in each credential, be it a user ID/password or certificate, is stored in Advanced Encryption Standard (AES) encrypted form in the database on the Dynatrace Cluster. Access to the data is granted only through a secure SSL channel. This means that after credentials are added to the credential vault, they won’t be visible to you or any other user in your organization; they are visible only to the synthetic monitors referencing them. The description and metadata of a credential can be displayed, but the sensitive information is available only for overwriting.

Re: Credential vault data traffic to Robots

pahofmann — Tue, 25 Feb 2020 16:55:20 GMT

I assume the question was more about spcifics about the secure SSL channel.

How is the access from the robots to the credentials vault implemented, is the Channel via Mission Control like the scheduling of the Synthetic Monitors?

Are they loaded from the cluster for every monitor run or cached somewhere?

Is the connection initiated from the cluster or from the robot?