OpenBao

Component description / functionalities

OpenBao is an identity-based secrets and encryption management system. In addition to storing key/value data such as passwords or tokens, it can host public key infrastructures (PKIs) for issuing certificates.
  • Secure Secrets Storage: Provides secure, identity-based storage for secrets, credentials, tokens, and certificates with strong access controls.
  • HSM-Backed Encryption at Rest: Protects secrets at-rest through different seal/unseal mechanisms including HSM-backed protection for high-security environments.
  • Multi-Tenancy via Namespaces: Supports multi-tenancy through namespaces, enabling isolated secret management for different teams, applications, or customers.

IPCEI CIS Reference Architecture

Security and Compliance Domain

Open source license

Keywords
secrets-management
pki
HSM
vault