HashiCorp Certified - Vault Associate Course - Lab—PKI Secrets Engine

This video tutorial demonstrates the setup and configuration of the Vault BKI Secrets Engine, focusing on creating and managing root and intermediate certificates. It covers enabling the PKI secrets engine, tuning settings, generating certificates, and using roles to manage domain access. The tutorial also highlights the importance of handling private keys securely and provides an overview of the Vault UI for certificate management.

What is the primary purpose of the Vault PKI Secrets Engine?

• To store user passwords securely

• To manage and issue digital certificates

• To encrypt database records

• To monitor network traffic

What is the maximum TTL set for the root certificate in this tutorial?

• 5 years

• 15 years

• 10 years

• 20 years

What is the purpose of generating a CSR in the intermediate PKI setup?

• To encrypt data

• To request a certificate from the root

• To create a backup of the PKI

• To reset the PKI configuration

Why is it important to have a role in the intermediate PKI?

• To provide user access control

• To limit the domains for certificate issuance

• To increase the security of the root PKI

• To automate the certificate renewal process

What happens if you lose the private key after generating a certificate?

• You can retrieve it from the Vault UI

• You must issue a new certificate

• It is stored in the system logs

• It can be regenerated using the same CSR