# Can Automise get credentials from a vault? **URL:** \ **Category:** Discussion\ **Created:** [September 25, 2025, 4:15pm UTC](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718 "2025-09-25T16:15:51Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![jonathanmeltzer](https://www.finalbuilder.com/forums/letter_avatar_proxy/v4/letter/j/34f0e0/32.png) [@jonathanmeltzer](https://www.finalbuilder.com/forums/u/jonathanmeltzer)\ **Post date:** [September 25, 2025, 4:15pm UTC](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718/1 "2025-09-25T16:15:51Z")
Even though I am encrypting the passwords that I use, I am being asked to store the credentials being used in Automise to connect to other applications (Salesforce, a database server on our network, etc) in a vault. Suggestions on our side are to use Hashi Vault or CA-PAM if possible (I am not really sure what either of those are). As a general question (getting specific later if needed), can Automise get credentials from a vault that is not local to the machine? If not, can it get credentials from a vault that is stored locally, if that is allowed on our end? ---
**Author:** ![Vincent](https://www.finalbuilder.com/forums/user_avatar/www.finalbuilder.com/vincent/32/938_2.png) [@Vincent](https://www.finalbuilder.com/forums/u/Vincent)\ **Post date:** [September 25, 2025, 8:20pm UTC](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718/2 "2025-09-25T20:20:48Z")
Hi Jonathan I have no experience with Hashi Vault or CA-PAM - however a quick google and Vault seems like a good option. It has an http api, so in theory we should be able to interact with it, whether it is local or remote. Now as to whether Automise can do that with what is available today, I cannot say - I will need to investigate. I suspect we will need to create some actions for Vault - I will do some research on this today. For CA-PAM - I assume that is the Broadcom product - there is no free version we could use - being broadcom I am pretty sure it would be prohibitively expensive - so it’s unlikely we could ever add explicit support. ---
**Author:** ![Vincent](https://www.finalbuilder.com/forums/user_avatar/www.finalbuilder.com/vincent/32/938_2.png) [@Vincent](https://www.finalbuilder.com/forums/u/Vincent)\ **Post date:** [September 26, 2025, 1:52am UTC](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718/3 "2025-09-26T01:52:33Z")
Hi Jonathan I spent the last few hours looking at Hashicorp Vault (installed it to experiment with), and I can say for sure we need to add some actions for it - however it would be useful to know what features you require from it. ### Authentication Vault provides a bunch of ways to authenticate - not all of them would be practical for us to support. After a quick read of the api docs we could certainly implement - Token (simple) - Username/Password (simple) - AppRole (a bit more complicated but doable) - LDAP (maybe, more research needed) - JWT (a bit more complicated but doable) ### Secrets Engines Vault has a bunch of different secret engines - however the only ones that would be practical for us to implement initially would be - Key Value (v1/v2) - Cubbyhole (ephemeral) Most others require infrastructure that would difficult or too costly for us to aquire. I will do some more research on this and work out what actions would be needed. ---
**Author:** ![jonathanmeltzer](https://www.finalbuilder.com/forums/letter_avatar_proxy/v4/letter/j/34f0e0/32.png) [@jonathanmeltzer](https://www.finalbuilder.com/forums/u/jonathanmeltzer)\ **Post date:** [September 26, 2025, 11:58am UTC](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718/4 "2025-09-26T11:58:19Z")
Thank you for looking into this! As far as I know, we would need the capability to store a password in the vault manually, but have Automise pull the credentials out when needed. For instance, I have an ID that connects to our local DB server. Call it jmeldb. Automise currently would get the password for jmeldb from the encrypted file that exists locally. In the new setup, Automise would connect to the vault and get the password for jmeldb from there. The vault would exist on the network but not on the local machine. I suppose it COULD reside on the local machine, but I don’t think that is the preferred setup. ---
**Author:** ![jonathanmeltzer](https://www.finalbuilder.com/forums/letter_avatar_proxy/v4/letter/j/34f0e0/32.png) [@jonathanmeltzer](https://www.finalbuilder.com/forums/u/jonathanmeltzer)\ **Post date:** [March 19, 2026, 6:05pm UTC](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718/5 "2026-03-19T18:05:51Z")
Given the requirements listed above, is it possible to have this added to Automise? Or do we need to pursue something different? And, is it possible to connect to Azure KeyVault? I am being told that for us, it has to be that. ---
**Author:** ![Vincent](https://www.finalbuilder.com/forums/user_avatar/www.finalbuilder.com/vincent/32/938_2.png) [@Vincent](https://www.finalbuilder.com/forums/u/Vincent)\ **Post date:** [March 20, 2026, 6:20am UTC](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718/6 "2026-03-20T06:20:57Z")
Hi Jonathan We’ll look into it. Azure has a rest api so we should be able to do something. ---
**Author:** ![jonathanmeltzer](https://www.finalbuilder.com/forums/letter_avatar_proxy/v4/letter/j/34f0e0/32.png) [@jonathanmeltzer](https://www.finalbuilder.com/forums/u/jonathanmeltzer)\ **Post date:** [March 20, 2026, 11:59am UTC](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718/7 "2026-03-20T11:59:28Z")
That would be great. I am being pressured to move away from Automise if we need to keep the credentials (even if encrypted) on the local machine. I know this is not your problem, but we have used Automise for a very long time and I really like it. I would like to keep using it if I can. ---
**Author:** ![Vincent](https://www.finalbuilder.com/forums/user_avatar/www.finalbuilder.com/vincent/32/938_2.png) [@Vincent](https://www.finalbuilder.com/forums/u/Vincent)\ **Post date:** [March 23, 2026, 5:14am UTC](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718/8 "2026-03-23T05:14:44Z")
Hi Jonathan Do you know if you will be using certificates to authenticate with Azure Key Vault? We have it working (in a demo app) but not with certificates so far. ---
**Author:** ![jonathanmeltzer](https://www.finalbuilder.com/forums/letter_avatar_proxy/v4/letter/j/34f0e0/32.png) [@jonathanmeltzer](https://www.finalbuilder.com/forums/u/jonathanmeltzer)\ **Post date:** [March 23, 2026, 12:47pm UTC](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718/9 "2026-03-23T12:47:18Z")
I asked our team, and this is the response that I received: “We can use SPN (Server Principal Name) with a certificate to Authenticate to Azure Key Vault or we can use managed identity. Would prefer both options.” ---
**Author:** ![Vincent](https://www.finalbuilder.com/forums/user_avatar/www.finalbuilder.com/vincent/32/938_2.png) [@Vincent](https://www.finalbuilder.com/forums/u/Vincent)\ **Post date:** [March 23, 2026, 5:47pm UTC](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718/10 "2026-03-23T17:47:10Z")
Hi Jonathan We have it working with certificates now and are working on managed identity support. That will take a bit longer to test since it needs to be done in the azure environment. Hopefully we will have something to show later this week. ---
**Author:** ![jonathanmeltzer](https://www.finalbuilder.com/forums/letter_avatar_proxy/v4/letter/j/34f0e0/32.png) [@jonathanmeltzer](https://www.finalbuilder.com/forums/u/jonathanmeltzer)\ **Post date:** [March 23, 2026, 6:01pm UTC](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718/11 "2026-03-23T18:01:10Z")
That is fantastic. I have passed on your update. Thank you! ---
**Author:** ![Vincent](https://www.finalbuilder.com/forums/user_avatar/www.finalbuilder.com/vincent/32/938_2.png) [@Vincent](https://www.finalbuilder.com/forums/u/Vincent)\ **Post date:** [March 24, 2026, 7:47am UTC](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718/12 "2026-03-24T07:47:25Z")
Hi Jonathan We managed to get the new `Azure Key Vault - Get Secret` action finished and tested on Azure today (most of the time was just understanding how to configure Azure). [https://downloads.finalbuilder.com/downloads/automise/550/AT550\_1737.exe](https://downloads.finalbuilder.com/downloads/automise/550/AT550_1737.exe) [https://downloads.finalbuilder.com/downloads/automise/550/ATCMD550\_1737.exe](https://downloads.finalbuilder.com/downloads/automise/550/ATCMD550_1737.exe) [https://downloads.finalbuilder.com/downloads/automise/550/AutomiseRunner550\_1737.exe](https://downloads.finalbuilder.com/downloads/automise/550/AutomiseRunner550_1737.exe) It’s pretty simple to use - especially if you are using it on an Azure VM using System Assigned managed identity. ![image](https://www.finalbuilder.com/forums/uploads/default/original/2X/9/9838215526f773ee7b38a37c5c72b899a498a05e.png) The actions supports authentication by - Client Secret - Certificate file (pfx plus password) - Certificate store (thumbprint of certificate in the windows certificate store) - System assigned Managed Identity - User assigned Manage Identity ![image](https://www.finalbuilder.com/forums/uploads/default/original/2X/0/070f4e2459d2a121e29debab8a766d8760f8d2ae.png) We’ll get the help topic done tomorrow. ---
**Author:** ![jonathanmeltzer](https://www.finalbuilder.com/forums/letter_avatar_proxy/v4/letter/j/34f0e0/32.png) [@jonathanmeltzer](https://www.finalbuilder.com/forums/u/jonathanmeltzer)\ **Post date:** [March 24, 2026, 12:07pm UTC](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718/13 "2026-03-24T12:07:30Z")
That’s an amazing turnaround. You should make sure to publicize this…there are likely other clients who would be interested. ---
**Author:** ![jonathanmeltzer](https://www.finalbuilder.com/forums/letter_avatar_proxy/v4/letter/j/34f0e0/32.png) [@jonathanmeltzer](https://www.finalbuilder.com/forums/u/jonathanmeltzer)\ **Post date:** [March 24, 2026, 8:03pm UTC](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718/14 "2026-03-24T20:03:05Z")
I did try running the executable above on the machine, to install it, and it does not start anything when I try to open it. No screens come up. I was able to download it fine, but the install might have a problem? This is AT550\_1737.exe ---
**Author:** ![Vincent](https://www.finalbuilder.com/forums/user_avatar/www.finalbuilder.com/vincent/32/938_2.png) [@Vincent](https://www.finalbuilder.com/forums/u/Vincent)\ **Post date:** [March 24, 2026, 9:19pm UTC](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718/15 "2026-03-24T21:19:57Z")
That’s odd, I just installed it on a Windows Server 2025 vm on Azure and it installed and ran fine. I hate to say it, but perhaps antivirus? ---
**Author:** ![Vincent](https://www.finalbuilder.com/forums/user_avatar/www.finalbuilder.com/vincent/32/938_2.png) [@Vincent](https://www.finalbuilder.com/forums/u/Vincent)\ **Post date:** [March 24, 2026, 11:55pm UTC](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718/16 "2026-03-24T23:55:46Z")
In the mean time, we have uploaded a newer build with some minor fixes (error handling for certificate files, and the browse for certificate button didn’t work). [https://downloads.finalbuilder.com/downloads/automise/550/AT550\_1739.exe](https://downloads.finalbuilder.com/downloads/automise/550/AT550_1739.exe) [https://downloads.finalbuilder.com/downloads/automise/550/ATCMD550\_1739.exe](https://downloads.finalbuilder.com/downloads/automise/550/ATCMD550_1739.exe) [https://downloads.finalbuilder.com/downloads/automise/550/AutomiseRunner550\_1739.exe](https://downloads.finalbuilder.com/downloads/automise/550/AutomiseRunner550_1739.exe) I installed on azure and tested this build installs and works. ---
**Author:** ![Vincent](https://www.finalbuilder.com/forums/user_avatar/www.finalbuilder.com/vincent/32/938_2.png) [@Vincent](https://www.finalbuilder.com/forums/u/Vincent)\ **Post date:** [March 25, 2026, 1:59am UTC](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718/17 "2026-03-25T01:59:16Z")
Another build, added support for chosing which certificate store to find the certificate in. [https://downloads.finalbuilder.com/downloads/automise/550/AT550\_1740.exe](https://downloads.finalbuilder.com/downloads/automise/550/AT550_1740.exe) [https://downloads.finalbuilder.com/downloads/automise/550/ATCMD550\_1740.exe](https://downloads.finalbuilder.com/downloads/automise/550/ATCMD550_1740.exe) [https://downloads.finalbuilder.com/downloads/automise/550/AutomiseRunner550\_1740.exe](https://downloads.finalbuilder.com/downloads/automise/550/AutomiseRunner550_1740.exe) ---
**Author:** ![jonathanmeltzer](https://www.finalbuilder.com/forums/letter_avatar_proxy/v4/letter/j/34f0e0/32.png) [@jonathanmeltzer](https://www.finalbuilder.com/forums/u/jonathanmeltzer)\ **Post date:** [March 25, 2026, 1:22pm UTC](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718/18 "2026-03-25T13:22:47Z")
And though it is not antivirus, the install issue is on our end. I will keep you posted if I get to do the install of the new version. ---
**Author:** ![jonathanmeltzer](https://www.finalbuilder.com/forums/letter_avatar_proxy/v4/letter/j/34f0e0/32.png) [@jonathanmeltzer](https://www.finalbuilder.com/forums/u/jonathanmeltzer)\ **Post date:** [March 25, 2026, 8:02pm UTC](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718/19 "2026-03-25T20:02:47Z")
Finally completed the install. Will look at the new features tomorrow/Friday if I can. ---
**Author:** ![jonathanmeltzer](https://www.finalbuilder.com/forums/letter_avatar_proxy/v4/letter/j/34f0e0/32.png) [@jonathanmeltzer](https://www.finalbuilder.com/forums/u/jonathanmeltzer)\ **Post date:** [March 26, 2026, 1:51pm UTC](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718/20 "2026-03-26T13:51:33Z")
Has the documentation been completed for the Vault feature? [Next page](https://www.finalbuilder.com/forums/t/can-automise-get-credentials-from-a-vault/7718.md?page=2)