Version:

This lesson is part of the Security in Ignition course. You can browse the rest of the lessons below.

LESSON LIST

Autoplay Off

LESSON

Embedded Secrets

Description

With embedded secrets, the system automatically encrypts entered passwords, keys, or other sensitive information and saves the values securely. Embedded secrets are not as flexible in different systems and locations as Referenced Secrets, but they still offer the benefit of encryption and data indirection.

Video recorded using: Ignition 8.3

Transcript

(open in window)

[00:00] In this lesson, we'll explore a simple option for secret keeping within the secrets management ecosystem -- an embedded secret to protect a password. We can then use that secret to securely connect to an existing PostgreSQL database. To start this process, we can go to the side menu and select connections, then databases, then connections. As you can see, the connection is currently faulted because we don't yet have our embedded secret in place. If we click the three dots menu and select edit, we can remedy that. Let's go to the password section in the data type mapping menu, select embedded here, and enter the password for our database. With embedded secrets, the system automatically encrypts entered passwords and saves the value securely. Embedded secrets are not as flexible in different systems and locations as referenced secrets, but they still offer the benefit of encryption and data indirection. I'll click on Save Changes and our database connection shows as valid.

[01:05] The embedded password can also be edited if needed without reading back or sharing the original value. If we click on the three dots menu and select Edit, you would see a checkbox now that when checked will allow a new password to be entered and saved. We don't need update the password, so we'll hit cancel to go back to the main screen. Using embedded secrets within your project can be a simple and effective way to enhance project security.

You are editing this transcript.

Make any corrections to improve this transcript. We'll review any changes before posting them.