TDM : Hashicorp-Vault integration

Products

• CA Test Data Manager (Data Finder / Grid Tools)

Issue/Introduction

How are we securely storing service account passwords used for database connectivity?
Does TDM support(feature/integrate) Hashicorp-vault ?

Environment

All supported releases of TDM

Resolution

By default, connection profiles are stored in the gtrep repository database, and the passwords are encrypted.

As for integration with Hashicorp-vault, connection profiles can use custom security plugin. We can leverage Vault APIs to get the password at runtime. For more information, see Security Plugins in the TDM documentation.