VaultOne: Configure Password Rotation for Linux and Unix Servers

You can use a dedicated script from VaultOne to perform automated password rotation for your Linux or Unix servers. This process involves enabling the rotation, downloading the script, generating a security key, and installing the script on your target server.

Prerequisites:

  • You must have administrative access to your VaultOne instance.
  • You must have superuser (sudo) access to the target Linux or Unix server.

Configuring Password Rotation in VaultOne

First, you must activate the password rotation feature for the specific credential you want to manage.

  1. Log in to your VaultOne platform.
  2. Go to the Passwords menu.
  3. Select the desired password to view its edit screen.
  4. Click the Password Rotation tab.
  5. Select the Use automatic password rotation for this credential checkbox.
  6. Click Save.
  7. Return to the Passwords menu and find the credential you configured.
  8. Click Actions, then select Password Rotation.
  9. In the new window, click Download Linux (Shell) Script.
  10. Next, in the same window, click Generate key.

Important:

This key is displayed only once. You must copy it immediately before you close the window.

  1. In the new window, click Download Linux (Shell) Script.
  2. Move the downloaded script file to the computer that will execute the rotation.

Installing the Script on the Server

Complete the process by installing and configuring the script on the target Linux/Unix server.

  1. On the target server, go to the directory where you moved the script file.
  2. If necessary, add execute permission to the script: chmod +x VaultOnePasswordRotationInstaller.sh
  3. Run the script with superuser privileges: sudo ./VaultOnePasswordRotationInstaller.sh
  4. Follow any on-screen prompts during the installation.

After the script installation is complete, password rotation occurs automatically according to the script's configured schedule.

Warning:

Password rotation on your servers only works on machines that use TLS protocol versions 1.2 and 1.3.

Back to Top

List IconIn this Article

Still Have Questions?

If you cannot find an answer to your question in our FAQ, you can always contact us.

Submit a Case