Breadcrumbs

Encrypting and Decrypting Secrets

  1. Authenticate the current shell with OpenStack admin credentials.

›_ Console

# source ~/devstack/openrc admin admin

  1. Create a secret or password.

›_ Console

# openstack secret store --name utimaco123 --payload password


SecretCreated.png


Secret created

  1. You can also verify the encryption operation logging in PKCS#11 log file cs_pkcs11_R2.log during secret generation as shown below.

SecretCreated_Logs_PKCS11.png


PKCS#11 logs showing secret encryption

  1. Fetch the created secret information.

›_ Console

# openstack secret get <secret_href>


GetSecretWithoutValue.png


Fetching secret information

  1. Fetch the created secret’s value.

›_ Console

# openstack secret get <secret_href> --payload


GetSecretWithValue.png


Fetching secret's value

The secret is first decrypted and then displayed.

  1. You can also verify the decryption operation logging in PKCS#11 log file cs_pkcs11_R2.log during secret retrieval as shown below.

SecretDecrypted_Logs_PKCS11.png


PKCS#11 logs showing secret decryption