• HashiCorp Developer

  • HashiCorp Cloud Platform
  • Terraform
  • Packer
  • Consul
  • Vault
  • Boundary
  • Nomad
  • Waypoint
  • Vagrant
Vault
  • Install
  • Tutorials
  • Documentation
  • API
  • Integrations
  • Try Cloud(opens in new tab)
  • Sign up
Vault Home

Tutorials

Skip to main contentTutorials

Get Started

  • CLI Quick Start
  • HCP Vault Quick Start
  • UI Quick Start

Use Cases

  • ADP
  • Database Credentials
  • Data Encryption
  • Key Management
  • Secrets Management

Certification Prep

  • Associate
  • Operations Pro

Production

  • Day One Preparation
  • Enterprise
  • HCP Vault Monitoring
  • Monitor & Troubleshoot
  • Recommended Patterns
  • Standard Procedures

Integrations

  • App Integration
  • Custom Secrets Engine
  • HashiCorp Products
  • Vault Agent

Kubernetes

  • HCP Vault
  • Vault

Operations

  • Authentication
  • Auto Unseal
  • Consul Storage Backend
  • Fundamentals
  • HCP Vault Operations
  • Integrated Storage
  • Policies
  • Terraform for HCP Vault
  • Tokens

  • Resources

  • Tutorial Library
  • Certifications
  • Community Forum
    (opens in new tab)
  • Support
    (opens in new tab)
  • GitHub
    (opens in new tab)
  1. Developer
  2. Vault
  3. Tutorials

Overview

Centrally store, access and deploy secrets

Explore HCP Vault

Get Started

  •  
    13 tutorials
    Getting Started
    Vault secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Get started here.
    • Vault
  •  
    8 tutorials
    Getting Started with Vault UI
    Manage Vault environment as well as your secrets using Vault UI.
    • Vault
  •  
    9 tutorials
    Getting Started with HCP Vault
    Quickly get hands-on with HashiCorp Cloud Platform (HCP) Vault using the HCP portal and setup your managed Vault cluster.
    • Vault

New Tutorials

Here are the most recently published tutorials.

  •  
    54min
    Disaster Recovery Replication Failover and Failback
    Learn how to failover in a Disaster Recovery Replication environment and then failback to original operating state.
    • Vault
  •  
    13min
    Vault Installation to Minikube via Helm with TLS enabled
    Deploy Vault on Kubernetes locally with TLS using Minikube and the official Helm chart.
    • Vault
  •  
    26min
    Audit Device Logs and Incident Response with Elasticsearch
    Learn how to use a Vault audit device with Elasticsearch for auditing specific critical Vault events as part of your incident response workflows.
    • Vault
    • Terraform
  •  
    13min
    Connect Google Cloud Platform (GCP) to HCP via AWS Transit Gateway
    Connect your Google Cloud Platform (GCP) to the HashiCorp Cloud Platform (HCP) though a transit gateway in an Amazon Web Services (AWS) VPC.
    • Vault

HashiCorp Well-Architected Framework

Learn about recommended best practices on HashiCorp products.

  •  
    5 tutorials
    Operational Excellence
    Implement the operational excellence pillar strategies to enable your organization to build and ship products quickly and efficiently; including changes, updates, and upgrades.<br> <br>The foundation of cloud adoption is infrastructure provisioning. Enable your team to focus on development by creating safe, consistent, and reliable workflows for deployment. Standardized processes allow teams to work efficiently and more easily adapt to changes in technology or business requirements.
    •  
      7 tutorials
      Reliability
      Architect workloads to perform within expectations and meet resiliency and recovery targets.
      •  
        5 tutorials
        Security
        Implement security best practices to secure your applications, protect your network, manage sensitive data, manage identity and access, and build security controls.

        Popular Topics

        Visit the most frequently viewed tutorial collections.

        •  
          7 tutorials
          Vault 1.12 Release Highlights
          The listed tutorials were updated to showcase the new enhancements introduced in Vault 1.12.
          • Vault
        •  
          12 tutorials
          HCP Vault Operations
          Learn how to provision and connect to HCP Vault clusters.
          • Vault
        •  
          19 tutorials
          Monitoring & Troubleshooting
          Vault monitoring and troubleshooting tutorials that help you inspect your Vault environment.
          • Vault
        •  
          20 tutorials
          Vault on Kubernetes
          Vault secures, stores, and tightly controls access to passwords, certificates, and other secrets in modern computing. Here are a series of tutorials that are all about running Vault on Kubernetes.
          • Vault
        •  
          22 tutorials
          Secrets Management
          Centrally store, access, and deploy secrets across applications, systems, and infrastructure.
          • Vault
        •  
          12 tutorials
          App Integration
          Integrate your applications with Vault using Vault API, client library, or external tools.
          • Vault

        All Tutorials

        • Advanced Data Protection
          • Transform Secrets Engine
          • Tokenize Data with Transform Secrets Engine
          • Encrypting Data with Transform Secrets Engine
          • KMIP Secrets Engine
          • Key Management Secrets Engine with Azure Key Vault
          • Key Management Secrets Engine with GCP Cloud KMS
        • App Integration
          • Secure Introduction of Vault Clients
          • Use Consul Template and Envconsul with Vault
          • AppRole With Terraform & Chef
          • Java Application Demo
          • Transit Secrets Re-wrapping
          • Encrypting Data with Transform Secrets Engine
          • Using HashiCorp Vault C# Client with .NET Core
          • Using HashiCorp Vault Agent with .NET Core
          • Build Your Own Plugins
          • Vault GitHub Actions
          • Vault AWS Lambda Extension
          • Introduction to the Vault AWS Lambda Extension
        • Auth Methods
          • Tokens
          • OIDC Auth Method
          • Azure Active Directory with OIDC Auth Method and External Groups
          • OIDC Authentication with Okta
          • Vault as an OIDC Identity Provider
          • AppRole Usage Best Practices
          • AppRole Pull Authentication
          • AppRole With Terraform & Chef
          • Enable Login Multi Factor Authentication (MFA)
          • Active Directory Auth Method with TOTP Login MFA
          • Vault Agent with AWS
          • Vault Agent with Kubernetes
          • Identity: Entities and Groups
          • Build Your Own Plugins
        • Auto Unseal
          • Auto-unseal using Azure Key Vault
          • Auto-unseal using GCP Cloud KMS
          • Auto-unseal using AWS KMS
          • Auto-unseal using Transit Secrets Engine
          • HSM Integration - Seal Wrap
        • Custom Secrets Engines
          • Define a Backend for the Secrets Engine
          • Define a Configuration for the Secrets Engine
          • Define Roles for the Secrets Engine
          • Implement Secrets for the Secrets Engine
          • Define Credentials for the Secrets Engine
          • Test and Build the Secrets Engine
        • Data Encryption
          • Encryption as a Service: Transit Secrets Engine
          • Transit Secrets Re-wrapping
          • Java Application Demo
        • Database Credential Rotation
          • Dynamic Secrets: Database Secrets Engine
          • Database Root Credential Rotation
          • Database Static Roles and Credential Rotation
          • Couchbase Secrets Engine
          • Database Secrets Engine with MongoDB
          • IBM Db2 Credential Management
          • User Configurable Password Generation for Secret Engines
          • Database Secrets Engine for Microsoft SQL Server on AWS RDS
          • Database Secrets Engine for Microsoft SQL Server
        • Deploy Cluster with Consul
          • Vault with Consul Storage Reference Architecture
          • Vault Multi-Cluster Architecture Guide
          • Vault with Consul Storage Deployment Guide
          • Production Hardening
          • Vault High Availability with Consul
        • Deploy Cluster with Integrated Storage
          • Vault with Integrated Storage Reference Architecture
          • Vault Multi-Cluster Architecture Guide
          • Vault with Integrated Storage Deployment Guide
          • Production Hardening
          • Auto-unseal using AWS KMS
          • Auto-unseal using Azure Key Vault
          • Auto-unseal using GCP Cloud KMS
          • Auto-unseal using Transit Secrets Engine
          • HSM Integration - Seal Wrap
          • Disaster Recovery Replication Setup
          • Vault Cluster Lost Quorum Recovery
          • Performance Replication with Paths Filter
        • Getting Started
          • What is Vault
          • Install Vault
          • Starting the Server
          • Your First Secret
          • Secrets Engines
          • Dynamic Secrets
          • Built-in Help
          • Authentication
          • Policies
          • Deploy Vault
          • Using the HTTP APIs with Authentication
          • Web UI
          • Next Steps
        • Getting Started with HCP Vault
          • What is Vault
          • What is HCP Vault
          • Create a Vault Cluster on HCP
          • Access a Vault Cluster on HCP
          • Multi-tenancy with Namespaces
          • Your First Secret
          • Create Vault Policies
          • Manage Authentication Methods
          • HCP Vault Operation Tasks
        • Getting Started with Vault UI
          • Getting Started with Vault UI
          • Install Vault
          • Web UI
          • Create Vault Policies
          • Manage Authentication Methods
          • Manage Secrets Engines
          • API Explorer in Vault UI
          • Next Steps
        • HashiCorp Product Integrations
          • Automatically Rotate Gossip Encryption Keys Secured in Vault
          • Generate mTLS Certificates for Consul with Vault
          • Administer Consul Access Control Tokens with Vault
          • Automate Consul Agent Security with Auto Config
          • Generate Nomad Tokens with HashiCorp Vault
          • Generate mTLS Certificates for Nomad using Vault
          • Vault Integration and Retrieving Dynamic Secrets
          • Deploy Consul and Vault on Kubernetes with Run Triggers
          • Inject Secrets into Terraform Using the Vault Provider
          • Deploy HCP Vault with Terraform
          • Deploy HCP Vault Performance Replication with Terraform
          • OSS Vault Credential Brokering Quickstart
          • Securing Access to Azure SQL Database
        • HCP Vault Monitoring
          • HCP Vault Metrics Guide
          • Configure HCP Vault Metrics Streaming to Datadog
          • Configure HCP Vault Audit Logs Streaming to Datadog
          • Configure HCP Vault Metrics Streaming to Grafana Cloud
          • Configure HCP Vault Audit Logs Streaming to Grafana Cloud
          • Configure HCP Vault Metrics Streaming to Splunk
          • Configure HCP Vault Audit Logs Streaming to Splunk
        • HCP Vault Operations
          • Peering an AWS VPC with HashiCorp Cloud Platform (HCP)
          • Connect an Amazon Transit Gateway to your HashiCorp Virtual Network
          • HCP Vault Namespace Considerations
          • HCP Vault Performance Replication
          • Set up AWS Auth Method for HCP Vault
          • OIDC Authentication with Okta
          • Deploy HCP Vault with Terraform
          • Codify Management of HCP Vault
          • HCP Vault with AWS EKS and JWT Auth Method
          • HCP Vault with Amazon Elastic Kubernetes Service
          • Deploy HCP Vault Performance Replication with Terraform
          • Manage Codified Vault on HCP Vault with Terraform
        • Integrated Storage
          • Vault with Integrated Storage Reference Architecture
          • Vault with Integrated Storage Deployment Guide
          • Vault HA Cluster with Integrated Storage
          • Vault HA Cluster with Integrated Storage on AWS
          • Integrated Storage Autopilot
          • Fault Tolerance with Redundancy Zones
          • Automate Upgrades with Vault Enterprise
          • Inspecting Data in Integrated Storage
          • Preflight Checklist - Migrating to Integrated Storage
          • Storage Migration tutorial - Consul to Integrated Storage
          • Use Integrated Storage for HA Coordination
          • Vault Cluster Lost Quorum Recovery
        • Key Management
          • Key Management Secrets Engine with Azure Key Vault
          • Key Management Secrets Engine with GCP Cloud KMS
        • Kubernetes with HCP Vault
          • HCP Vault with Amazon Elastic Kubernetes Service
          • HCP Vault with AWS EKS and JWT Auth Method
          • Vault Agent with Amazon Elastic Container Service
        • Monitoring & Troubleshooting
          • Troubleshooting Vault
          • Troubleshooting Vault on Kubernetes
          • Diagnose Server Issues
          • Use hcdiag with Vault
          • Monitoring Vault Replication
          • Vault Usage Metrics
          • Monitor Telemetry & Audit Device Log Data
          • Monitor Telemetry with Prometheus & Grafana
          • Inspect Data in BoltDB
          • Inspecting Data in Consul Storage
          • Inspecting Data in Integrated Storage
          • Blocked Audit Devices
          • Querying Audit Device Logs
          • Troubleshoot Irrevocable Leases
          • Vault Cluster Lost Quorum Recovery
          • Operate Vault in Recovery Mode
          • Telemetry Metrics Reference
          • Monitoring Vault with Datadog
          • Audit Device Logs and Incident Response with Elasticsearch
        • Operations Fundamentals
          • Configure Vault
          • Production Hardening
          • Generate Root Tokens Using Unseal Keys
          • Rekeying & Rotating Vault
          • Protecting Vault with Resource Quotas
          • Performance Tuning
          • Identity: Entities and Groups
          • Codify Management of Vault Using Terraform
          • Codify Management of Vault Enterprise Using Terraform
          • Emergency Break-Glass Features
          • Create Customized HTTP Headers for your Vault Requests
          • Apply Codified OSS Vault Configuration to HCP Vault with Terraform
          • Audit Device Logs and Incident Response with Elasticsearch
        • Policies
          • Vault Policies
          • Write a Policy using API documentation
          • Write a Policy using Audit Logs
          • ACL Policy Path Templating
          • Sentinel Policies
          • Sentinel HTTP Import
          • Sentinel Validation Policies
          • Control Groups
          • User Configurable Password Generation for Secret Engines
        • Prepare for Vault Associate Exam
          • Study Guide - Vault Associate Certification
          • Sample Questions - Vault Associate Certification
          • Review Guide - Vault Associate Certification
        • Prepare for Vault Operations Pro Exam
          • Vault Operations Professional Certification Overview
          • Study Guide - Vault Operations Professional Certification
          • Review Guide - Vault Operations Professional Certification
        • Recommended Patterns
          • Recommended Pattern for Vault Unseal
          • Recommended Pattern for Stateless Vault for Transit Auto Unseal
          • Recommended Pattern for Vault AppRole Use
          • Recommended Pattern for Vault Centralized Secrets Management
          • Recommended Pattern for Vault ACL Policy Path Templates
          • Vault Namespace and Mount Structuring Guide
        • Secrets Management
          • Static Secrets: Key/Value Secrets Engine
          • Versioned Key/Value Secrets Engine
          • Compare Key/Value Secrets Engine v1 and v2
          • Cubbyhole Response Wrapping
          • Active Directory Service Account Check-out
          • LDAP Secrets Engine
          • Azure Secrets Engine
          • Build Your Own Certificate Authority (CA)
          • Build Certificate Authority (CA) in Vault with an offline Root
          • PKI Secrets Engine with Managed Keys
          • SSH Secrets Engine: One-Time SSH Password
          • User Configurable Password Generation for Secret Engines
          • Username Templating
          • KMIP Secrets Engine
          • Terraform Cloud Secrets Engine
          • Build Your Own Plugins
          • Vault Secrets in a Browser Plugin Challenge
          • Generate Nomad Tokens with HashiCorp Vault
          • Generate mTLS Certificates for Nomad using Vault
          • Vault Integration and Retrieving Dynamic Secrets
          • Inject Secrets into Terraform Using the Vault Provider
          • IBM Db2 Credential Management
        • Standard Operating Procedures
          • Vault Data Backup Standard Procedure
          • Vault Upgrade Standard Procedure
          • Standard Procedure for Restoring a Vault Cluster
        • Terraform for HCP Vault
          • Deploy HCP Vault with Terraform
          • Codify Management of HCP Vault
          • Deploy HCP Vault Performance Replication with Terraform
          • Apply Codified OSS Vault Configuration to HCP Vault with Terraform
          • Manage Codified Vault on HCP Vault with Terraform
        • Vault Agent
          • Vault Agent with AWS
          • Vault Agent with Kubernetes
          • Vault Agent Caching
          • Vault Agent Templates
          • Vault Agent Windows Service
          • Read Secrets From Vault Using Vault Agent
          • Using HashiCorp Vault Agent with .NET Core
          • Vault Agent with Amazon Elastic Container Service
        • Vault Enterprise
          • Install a HashiCorp Enterprise License
          • Secure Multi-Tenancy with Namespaces
          • Vault Namespace and Mount Structuring Guide
          • Move Secrets Engines and Auth Methods Across Namespaces
          • Disaster Recovery Replication Setup
          • Disaster Recovery Replication Failover and Failback
          • Performance Standby Nodes
          • Setting up Performance Replication
          • Performance Replication with Paths Filter
          • Monitoring Vault Replication
          • Protecting Vault with Resource Quotas
          • Codify Management of Vault Enterprise Using Terraform
          • PKI Secrets Engine with Managed Keys
          • Sentinel Policies
          • Sentinel HTTP Import
          • Control Groups
          • Transform Secrets Engine
          • Tokenize Data with Transform Secrets Engine
          • KMIP Secrets Engine
          • Key Management Secrets Engine with Azure Key Vault
          • Key Management Secrets Engine with GCP Cloud KMS
          • HSM Integration - Seal Wrap
          • HSM Integration - Entropy Augmentation
        • Vault on Kubernetes
          • Vault on Kubernetes Reference Architecture
          • Vault on Kubernetes Deployment Guide
          • Vault Installation to Minikube via Helm with Integrated Storage
          • Vault Installation to Minikube via Helm with Consul
          • Vault Installation to Minikube via Helm with TLS enabled
          • Vault Installation to Amazon Elastic Kubernetes Service via Helm
          • Vault Installation to Red Hat OpenShift via Helm
          • Vault Installation to Google Kubernetes Engine via Helm
          • Vault Installation to Azure Kubernetes Service via Helm
          • Deploy Vault on Amazon EKS Anywhere
          • Injecting Secrets into Kubernetes Pods via Vault Agent Containers
          • Mount Vault Secrets through Container Storage Interface (CSI) Volume
          • Configure Vault as a Certificate Manager in Kubernetes with Helm
          • Integrate a Kubernetes Cluster with an External Vault
          • Vault Agent with Kubernetes
          • Troubleshooting Vault on Kubernetes
          • Deploy Consul and Vault on Kubernetes with Run Triggers
          • Automate Terraform Cloud Workflows
          • Vault on Kubernetes Security Considerations
          • Kubernetes Secrets Engine
        • Vault Tokens
          • Tokens
          • Batch Tokens
          • Token Management

        On this page

        1. Get Started
        2. New Tutorials
        3. HashiCorp Well-Architected Framework
        4. Popular Topics
        5. All Tutorials
        Give Feedback(opens in new tab)
        • Certifications
        • System Status
        • Terms of Use
        • Security
        • Privacy
        • Trademark Policy
        • Trade Controls
        • Give Feedback(opens in new tab)