Auto-auth method: TPM

The tpm method uses TLS certificates generated by a corresponding tpm_cert section.

Configuration

• tpm_cert (string: required) - The name of the corresponding tpm_cert stanza from which to obtain the role_name, tpm device_path, and cert files destination.

• reload (bool: optional, default: false) - If true, causes the local x509 key-pair to be reloaded from disk on each authentication attempt. This is useful in situations where client certificates are short-lived and automatically renewed. Enable enable_reauth_on_new_credentials for immediate re-authentication when Vault issues a new certificate. Refer to the auto-auth configuration documentation.

• reload_period (duration: "1m", optional) - The interval at which auto-auth checks for changes to the certificate files produced by the referenced tpm_cert stanza. Defaults to 1m and uses duration format strings.