Traffic Vault is a key/value store used for storing the following types of information:
Key Signing Key
Zone Signing Key
URL Signing Keys
As the name suggests, Traffic Vault is meant to be a “vault” of private keys that only certain users are allowed to access. In order to create, add, and retrieve keys a user must have administrative privileges. Keys can be created via the Traffic Portal UI, but they can only be retrieved via the Traffic Ops API. The keystore used by Traffic Vault is Riak. Traffic Ops accesses Riak via HTTPS on port 8088. Traffic Ops uses Riak’s REST API with username/password authentication.
Information on the Riak API can be found in their documentation.