June 20 - 22 - Tokyo, Japan
Click for Open Source Summit Japan & Automotive Linux Summit Information & Registration
Thursday, June 21 • 14:50 - 15:30
Managing Server Secrets at Scale with a Vaultless Password Manager - Ignat Korchagin, Cloudflare

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Feedback form is now closed.
Operating a large cluster, a datacenter, or a distributed network involves handling a lot of secrets. In almost all cases, you have to deal with at least four types of secrets for each piece of hardware: SSH server key (or shell access key), key to bootstrap your configuration management system, disk encryption key, and maybe some per-server credentials to access other services. And most of the time, these keys have to be set up before your configuration management kicks in, making the automation of this process more difficult.

This talk presents an approach that combines hardware support and little cryptography to deal with the above issues and unify and simplify secret management for your hardware fleet.

avatar for Ignat Korchagin

Ignat Korchagin

Systems engineer, Cloudflare
Ignat is a systems engineer at Cloudflare working mostly on Linux, platforms and hardware security. Ignat’s interests are cryptography, hacking, and low-level programming. Before Cloudflare, Ignat worked as a senior security engineer for Samsung Electronics’ Mobile Communications... Read More →

Thursday June 21, 2018 14:50 - 15:30 JST
Room 1