Vaulting Configuration
Vaulting Configuration section allows you to configure various details about vaults that are necessary for proper and efficient usage of vault users
It allows you to configure the following:
Password Policy
Active Directory (A central location for vault users)
Manual Generation of Passwords for Vault Users (All or Specific Users)
Password Policy
Cymmetri allows you to select a specific Password Policy for Vault Users, If nothing is changed it uses the default password policy of Cymmetri.
For Changing the Password Policy for Vault Users, Select Vaulting Configuration and then select the Password Policy that you wish to implement from the dropdown provided as shown below:
Active Directory
If the vault users are stored at a central location like Active Directory then we need to configure the location and access credentials of this Active Directory.
For configuring the Active Directory we need to provide the following information as shown below:
Active Directory Domain: Here we need to provide the Active Directory LDAP URL and the root domain details. For e.g. ldaps://EC2AMAZ-2LBJU5A.cymmetri.in:636;DC=cymmetri,DC=in
User Name: This is the Active Directory Administrative username. For e.g. Cymmadmin
Password: This is the Active Directory Administrative password.
Generation of Passwords for Vault Users (All or Specific Users)
For Generating Password for Vault User we need to do the following configurations:
One or more users who will receive an email that contains the list of usernames and passwords
Password for opening the file which contains the list of usernames and passwords
Configure a scheduler to reset the password of users and send an email to the above configured use
Manually send the list of usernames and passwords of all or specific users
One or more users who will receive an email that contains the list of usernames and passwords:
For adding users who will receive the email containing the list of usernames and passwords we need to select one more cymmetri users here as shown below:
![](https://help.cymmetri.io/~gitbook/image?url=https%3A%2F%2Fs3-ap-south-1.amazonaws.com%2Find-cdn.freshdesk.com%2Fdata%2Fhelpdesk%2Fattachments%2Fproduction%2F84028159261%2Foriginal%2FsntoszZmJccQwKfI_9DqEZS3vo6U_M0Z-g.png%3F1678254577&width=768&dpr=4&quality=100&sign=72d8b0b5&sv=1)
Password for opening the file which contains the list of usernames and passwords
For Configuring the password simply enter the password in the password box provided
Configure a scheduler to reset the password of users and send an email to the above configured use
For configuring a schedular we need to enable the scheduler and provide the following details:
A start execution date and
cron expression
The cron expression can also be generated using the Generate Cron Expression option as shown below:
Manually reset and send the list of usernames and passwords of all or specific users
Password of vault users can be reset manually and sent an email for all or for specific users
You can either reset password for all users and send a list by selecting the All users option and clicking on Generate Password button as shown below:
Alternatively you may also send a list of only specific usernames and passwords by selecting To specific users option and then selecting the users whose details you need to reset and send.