3 ms·
\o do you mind opening issues for these topics for discussion? https://github.com/openbao/openbao/issues/new https://github.com/openbao/openbao/issues/new TPM
by cipherboy 3y ago
\o do you mind opening issues for these topics for discussion?
https://github.com/openbao/openbao/issues/new https://github.com/openbao/openbao/issues/new
TPM seal could be addressed with the PKCS#11 TPM bridge (which requires Vault Enterprise). But I'm curious what blocking queries are, as I've not heard of them before...
Elaboration on the pain points of plugin lifecycle would definitely be useful :-)
- candiddevmike 3y agoSure, just opened two issues around the blocking queries and plugin interface. I'm not sure how adding Vault Enterprise features like HSM/PKCS#11 into OpenBao will work, could create some legal issues depending on how it's done.
- cipherboy 3y agoRight, sorry, I wasn't implying that the community should or could add PKCS#11 support, just stating that while TPM support is nominally lacking from Vault Enterprise documentation, it is achievable today via PKCS#11 bridge. :-)