Help Center/ Data Encryption Workshop/ User Guide/ Cloud Secret Management Service/ Managing Secret Versions/ Saving and Viewing Secret Values
Updated on 2024-12-19 GMT+08:00
View PDF
Share

Saving and Viewing Secret Values

This section describes how to save and view secret values on the CSMS console.

You can create a new version of a secret to encrypt and keep a new secret value. By default, The latest secret version in SYSCURRENT state. The previous version is in the SYSPREVIOUS state.

Constraints

  • A secret can have up to 20 versions.
  • Secret versions are numbered v1, v2, v3, and so on based on their creation time.
  • For RDS and TaurusDB secrets, do not manually input the secret values.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. Click on the left. Choose Security & Compliance > Data Encryption Workshop.
  4. In the navigation pane on the left, choose Cloud Secret Management Service > Secrets. The Cloud Secret Management Service page is displayed.
  5. Click a secret name to go to the details page.
  6. In the , click Add Secret Version, as shown in Figure 1. Configure Secret key/value or Plaintext.

    Figure 1 Adding a secret value

  7. You can select an expiration time for the stored secret value. The time can be specific to seconds. After the setting is complete, you can view the expiration time in the secret version list. For example, Jun 30, 2023 19:52:59.
  8. Click OK. A message is displayed in the upper right corner of the page, indicating that the value is added successfully.
  9. In the Version List area, locate the target secret version, click View Secret in the Operation column, as shown in Figure 2.

    Figure 2 Secret version list

  10. If critical operation protection is enabled, after you click View Secret, you need to pass the operation verification before viewing the secret value.

    If critical operation protection is not enabled, after you click View Secret, click OK to view the secret value.

    For details about enabling critical operation protection, see Critical Operation Protection.

    Generally, secret values are obtained by applications through API calls. If you need to check the secret value on the service console, enable this function for data security. Confirm again and click OK.

  11. View the secret value and click OK.
Parent topic: Managing Secret Versions