This page describes how to enable HashiCorp Vault–based credential management for the Classic Gateway by updating the vProbe configuration and restarting the vProbe service.

After enablement, the Classic Gateway securely retrieves credentials from HashiCorp Vault for supported Discovery and Monitoring operations, instead of storing credentials in OpsRamp.

Procedure

  1. Log in to the Classic Gateway CLI using ruser credentials.
  2. Navigate to the following directory:
    cd /opt/gateway/vprobe/conf
  3. Open the vprobe.conf file in vi editor using the following command:
    /opt/gateway/vprobe/conf# vi vprobe.conf
  4. Update the following parameter (default for all Gateways: false):
    gateway.vault.enabled=true
  5. Save and quit the file:
    :wq!
  6. Check the current vProbe service status. Before restarting the service, verify the current status:
    systemctl status vprobe

Example output when the service is not running:

Active: inactive (dead)
This confirms the service is stopped and ready to be restarted with the updated configuration.

  1. Start the vProbe service to apply the configuration change:
    systemctl start vprobe
  2. Confirm that the vProbe service has started successfully:
    systemctl status vprobe

Example output when the service is running:

Active: active (running)

An active (running) state confirms that the vProbe service is running with the updated Vault configuration.

(Optional) Provide Vault Details in the Classic Gateway

Use this option if you want to provide vault details in the Gateway itself instead of configuring them at the OpsRamp integration level.

  1. Edit the vprobe service file in the following path:
    vi /etc/systemd/system/vprobe.service
  2. Set the following environment variable to point to the vault configuration file:
    Environment="VAULT_CONFIG_FILE=/opt/gateway/vprobe/conf/vault.properties"
    Since you modified a systemd unit, you must reload systemd:
    sudo systemctl daemon-reload
  3. Add the vault details to the Gateway:
vi /opt/gateway/vprobe/conf/vault.properties
root@opsramp:/opt/gateway/vprobe/conf# cat vault.properties 
# --- Provider --- 
vault.provider.type=hashicorp 
# --- Connection
vault.address=http://127.0.0.1:8200
vault.token=s.XXXXXXXXXXXXXXXXXXXX
  1. Restart the vprobe service to apply the changes and verify that the gateway starts successfully.