Traffic Vault

Traffic Vault is a data store used for storing the following types of sensitive information:

• SSL Certificates

  • Private Key

  • Certificate

  • CSR

• DNSSEC Keys

  • Key Signing Key

    • private key

    • public key

  • Zone Signing Key

    • private key

    • public key

• URL Signing Keys

As the name suggests, Traffic Vault is meant to be a “vault” of private keys that only certain users are allowed to access. In order to create, add, and retrieve keys a user must have administrative privileges. Keys can be created via the Traffic Portal UI, but they can only be retrieved via the Traffic Ops API. Currently, the supported data stores used by Traffic Vault are PostgreSQL and Riak (deprecated). Support for Riak may be removed in a future release.